Known vulnerabilities in Apache Thrift

Vendor: Apache Foundation
Software: Apache Thrift
Software CPE: cpe:2.3:a:apache_foundation:thrift:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 33
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Thrift Apache Thrift is affected by 33 known vulnerabilities: 1 high, 30 medium, 2 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145305 - Improper Validation of Certificate with Host Mismatch
CVE-2026-43869		 CWE-297 Medium
No
No
 0.23.0 25.08.2026 SB2026042851
SB20260825114
SB2026082846
#VU145199 - Improper Validation of Certificate with Host Mismatch
CVE-2026-66053		 CWE-297 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
SB2026082589
SB2026082846
and 1 more
#VU145198 - Out-of-bounds read
CVE-2026-58662		 CWE-125 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
#VU145197 - Allocation of Resources Without Limits or Throttling
CVE-2026-58389		 CWE-770 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
#VU145196 - Out-of-bounds read
CVE-2026-58023		 CWE-125 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
#VU145195 - Heap-based Buffer Overflow
CVE-2026-55971		 CWE-122 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
#VU145194 - Out-of-bounds read
CVE-2026-55970		 CWE-125 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
SB2026082589
#VU145193 - Integer overflow
CVE-2026-55969		 CWE-190 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
SB2026082589
#VU145192 - Inefficient Algorithmic Complexity
CVE-2026-55968		 CWE-407 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
SB2026082589
SB2026090813
#VU145191 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-49158		 CWE-409 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
SB2026082589
#VU145190 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-48586		 CWE-409 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
SB2026082587
SB2026082589
and 1 more
#VU145189 - Improper Validation of Certificate with Host Mismatch
CVE-2026-48145		 CWE-297 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
SB2026082589
#VU145188 - Improper Validation of Certificate with Host Mismatch
CVE-2026-48144		 CWE-297 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
#VU145187 - Allocation of Resources Without Limits or Throttling
CVE-2026-45112		 CWE-770 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
SB2026082587
SB2026082589
#VU145186 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-43871		 CWE-835 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
SB2026082589
SB20260917194
#VU145185 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-41608		 CWE-409 Medium
No
No
 0.24.0 25.08.2026 SB2026082559
SB2026082589
SB20260917194
#VU128308 - Improper Validation of Certificate with Host Mismatch
CVE-2026-41603		 CWE-297 Medium
No
No
 0.23.0 28.04.2026 SB2026042851
SB2026051810
SB2026082589
and 2 more
#VU128307 - Out-of-bounds read
CVE-2026-41604		 CWE-125 Medium
No
No
 0.23.0 28.04.2026 SB2026042851
SB2026051810
#VU128306 - Integer overflow
CVE-2026-41605		 CWE-190 Medium
No
No
 0.23.0 28.04.2026 SB2026042851
SB2026051810
#VU128305 - Uncontrolled Recursion
CVE-2026-41606		 CWE-674 Medium
No
No
 0.23.0 28.04.2026 SB2026042851
SB2026051810


Showing elements 1 - 20 out of 33