Product by Ubuntu

    Apache2

    59 known vulnerabilities in Apache2 (Ubuntu), 0 of them actively exploited (CISA KEV).

    Key figures

    59

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache2 (Ubuntu)
    HighCVE-2026-49975

    Apache HTTP Server: mod_http2 denial of service

    also in 8 other products

    		7.5
    CriticalCVE-2024-38476

    Apache HTTP Server: Inclusion of Functionality from Untrusted Control Sphere

    also in 4 other products

    		9.8
    HighCVE-2024-38473

    Apache HTTP Server proxy encoding problem

    also in 4 other products

    		8.1
    HighCVE-2024-39573

    Apache HTTP Server: mod_rewrite proxy handler substitution

    also in 4 other products

    		7.5
    CriticalCVE-2026-28780

    Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()

    also in 3 other products

    		9.8
    HighCVE-2023-38709

    Apache HTTP Server: HTTP response splitting

    also in 9 other products

    		7.3
    HighCVE-2024-38477

    Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request

    also in 4 other products

    		7.5
    HighCVE-2025-58098

    Apache HTTP Server: Insertion of Sensitive Information Into Sent Data

    also in 7 other products

    		8.3
    MediumCVE-2024-24795

    Apache HTTP Server: HTTP Response Splitting in multiple modules

    also in 9 other products

    		6.3
    HighCVE-2026-63292

    Apache HTTP Server: mod_vhost_alias stack overflow

    also in 3 other products

    		7.5
    CriticalCVE-2026-57941

    Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy

    also in 3 other products

    		9.8
    MediumCVE-2023-45802

    Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST

    also in 6 other products

    		5.9
    CriticalCVE-2026-56154

    Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}

    also in 3 other products

    		9.8
    HighCVE-2026-34355

    Apache HTTP Server: mod_proxy_html buffer overflow

    also in 5 other products

    		7.5
    CriticalCVE-2026-59797

    Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function

    also in 3 other products

    		9.8
    CriticalCVE-2026-29167

    Apache HTTP Server: mod_ldap per-dir use-after-free

    also in 6 other products

    		9.8
    HighCVE-2026-42536

    Apache HTTP Server: mod_xml2enc heap overflow

    also in 5 other products

    		7.5
    CriticalCVE-2026-56153

    Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char

    also in 3 other products

    		9.4
    HighCVE-2026-56449

    Apache HTTP Server: mod_proxy_html: crash in dump_content

    also in 3 other products

    		7.5
    HighCVE-2026-93546

    Apache HTTP Server: mod_dav_fs namespace overflow

    also in 3 other products

    		8.8
    HighCVE-2026-48005

    Apache HTTP Server: mod_auth_digest reauthentication attack

    also in 3 other products

    		7.5
    CriticalCVE-2026-44631

    Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow

    also in 5 other products

    		9.8
    HighCVE-2026-24072

    Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr

    also in 3 other products

    		8.8
    HighCVE-2026-119618

    Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers

    also in 3 other products

    		8.1
    CriticalCVE-2026-42535

    Apache HTTP Server: mod_dav_fs protected directory access

    also in 5 other products

    		9.1

    All vulnerabilities in search

    News

    All products by Ubuntu