Apache

Thrift

94 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.2

CVE-2026-90440

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 11:44:11
  • Zuletzt bearbeitet 02.10.2026 14:30:28

Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to...

8.7

CVE-2026-87117

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 11:43:11
  • Zuletzt bearbeitet 02.10.2026 18:17:06

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

8.7

CVE-2026-86537

  • EPSS 0.55%
  • Veröffentlicht 02.10.2026 11:40:51
  • Zuletzt bearbeitet 02.10.2026 15:17:11

Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound) vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upg...

6.3

CVE-2026-86536

  • EPSS 0.46%
  • Veröffentlicht 02.10.2026 11:40:06
  • Zuletzt bearbeitet 02.10.2026 18:17:06

Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re...

8.7

CVE-2026-86535

  • EPSS 0.34%
  • Veröffentlicht 02.10.2026 11:38:16
  • Zuletzt bearbeitet 02.10.2026 18:17:06

Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift NodeJS bindings with TJSONProtocol. This issue affects Apache Thrift: ...

6.9

CVE-2026-85088

  • EPSS 0.22%
  • Veröffentlicht 02.10.2026 11:37:14
  • Zuletzt bearbeitet 02.10.2026 18:17:06

Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access manager for client sockets — TSSLSocketFactory does so in C++, and the accessManager property does so in D —...

6.9

CVE-2026-85087

  • EPSS 0.22%
  • Veröffentlicht 02.10.2026 11:35:44
  • Zuletzt bearbeitet 02.10.2026 18:17:06

Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

6.9

CVE-2026-85086

  • EPSS 0.26%
  • Veröffentlicht 02.10.2026 11:34:00
  • Zuletzt bearbeitet 02.10.2026 18:17:06

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixe...

8.2

CVE-2026-82459

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 11:32:30
  • Zuletzt bearbeitet 02.10.2026 18:17:05

Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

8.7

CVE-2026-82458

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 11:30:51
  • Zuletzt bearbeitet 02.10.2026 18:17:05

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift:...