apache thrift

Name: apache thrift
Brand: apache

productUS

cpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

4critical14high3medium0low

updated 2026-10-27

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-0205US	high7.5	9.16% (95th)	Exploit	no fix	2019-10-29	≤ 0.12.0
CVE-2018-1320US	high7.5	8.19% (95th)	—	no fix	2019-01-07	0.5.0 → 0.11.0
CVE-2016-5397US	high8.8	6.87% (94th)	—	no fix	2018-02-12	≤ 0.9.3
CVE-2020-13949US	high7.5	6.78% (94th)	—	no fix	2021-02-12	0.9.3 → 0.13.0
CVE-2019-0210US	high7.5	6.53% (94th)	—	no fix	2019-10-29	0.9.3 → 0.12.0
CVE-2015-3254US	medium6.5	5.33% (93rd)	—	no fix	2017-06-16	≤ 0.9.2
CVE-2018-11798US	medium6.5	4.71% (92nd)	—	no fix	2019-01-07	0.9.2 → 0.11.0
CVE-2026-41602US	—	1.16% (67th)	—	0.23.0	2026-04-28	< 0.23.0
CVE-2026-41606US	—	1.10% (66th)	—	0.23.0	2026-04-28	< 0.23.0
CVE-2026-58662US	critical9.1	1.08% (65th)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2025-48431US	—	1.04% (64th)	—	0.23.0	2026-04-28	< 0.23.0
CVE-2026-58389US	high7.5	1.03% (64th)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-55969US	high7.5	1.03% (64th)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-55968US	high7.5	1.03% (64th)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-48586US	high7.5	1.03% (64th)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-45112US	high7.5	1.03% (64th)	—	0.24.0	2026-07-27	0.19.0 → 0.24.0
CVE-2026-43871US	high7.5	1.03% (64th)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-41608US	high7.5	1.03% (64th)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-49158US	—	1.03% (64th)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-58023US	critical9.1	1.02% (63rd)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-55971US	critical9.8	0.98% (62nd)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-41605US	—	0.93% (60th)	—	0.23.0	2026-04-28	< 0.23.0
CVE-2026-41604US	—	0.92% (60th)	—	0.23.0	2026-04-28	< 0.23.0
CVE-2026-41607US	—	0.90% (59th)	—	0.23.0	2026-04-28	< 0.23.0
CVE-2026-55970US	medium6.5	0.78% (56th)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-43868US	—	0.71% (53rd)	—	0.23.0	2026-05-05	< 0.23.0
CVE-2026-43869US	—	0.63% (50th)	—	0.23.0	2026-05-05	< 0.23.0
CVE-2026-41636US	high7.5	0.45% (39th)	—	0.23.0	2026-04-28	< 0.23.0
CVE-2026-48145US	high7.5	0.42% (36th)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-48144US	critical9.1	0.40% (34th)	—	0.24.0	2026-07-27	< 0.24.0
CVE-2026-43870US	—	0.38% (32nd)	—	0.23.0	2026-05-05	< 0.23.0
CVE-2026-66053US	—	0.29% (22nd)	—	0.24.0	2026-07-27	< 0.24.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read5 CVEs
CWE-297Improper Validation of Certificate with Host Mismatch4 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-409Improper Handling of Highly Compressed Data (Data Amplification)3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-295Improper Certificate Validation2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan