PT-2026-41237 · Apache · Apache Http Server

Published 2026-05-15 · Updated 2026-05-15 · CVE-2021-26380

Positive Technologies (AI Summary)

CVSS v4.0

1.8

Low

Base vector

AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Apache HTTP Server (affected versions not specified)

Description A compromised Trusted OS (TOS) driver could issue a malformed call that potentially allows memory access outside the intended range, resulting in a loss of integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2021-26380

Affected Products

Apache Http Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-26380 · Security Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html · Note
• https://t.me/cveNotify/163566 · Telegram Post
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html · Note
• https://t.me/CVEtracker/53852 · Telegram Post