Apache HTTP Server 2.4
There is no known end-of-support date for Apache HTTP Server 2.4.
Latest version: 2.4.69, released on 01/10/2026
End of support: no date known
No known vulnerability open in 2.4.69
Vulnerabilities in Apache HTTP Server 2.4
182 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 02/11/2026.
- CVE-2021-42013, CVSS 3.1: 9.8, actively exploited: not affected in 2.4.69
- CVE-2021-41773, CVSS 3.1: 9.8, actively exploited: not affected in 2.4.69
- CVE-2024-38475, CVSS 3.1: 9.1, actively exploited: fixed in 2.4.60
- CVE-2021-40438, CVSS 3.1: 9.0, actively exploited: not affected in 2.4.69
- CVE-2019-0211, CVSS 3.1: 7.8, actively exploited: not affected in 2.4.69
- CVE-2026-59797, CVSS 3.1: 9.8: fixed in 2.4.69
- CVE-2026-57941, CVSS 3.1: 9.8: fixed in 2.4.69
- CVE-2026-56154, CVSS 3.1: 9.8: fixed in 2.4.69
- CVE-2026-44631, CVSS 3.1: 9.8: fixed in 2.4.68
- CVE-2026-29167, CVSS 3.1: 9.8: fixed in 2.4.68
- CVE-2026-28780, CVSS 3.1: 9.8: fixed in 2.4.67
- CVE-2024-38476, CVSS 3.1: 9.8: fixed in 2.4.60
- CVE-2024-38474, CVSS 3.1: 9.8: fixed in 2.4.60
- CVE-2023-25690, CVSS 3.1: 9.8: not affected in 2.4.69
- CVE-2022-31813, CVSS 3.1: 9.8: fixed in 2.4.54
- CVE-2022-23943, CVSS 3.1: 9.8: fixed in 2.4.53
- CVE-2022-22720, CVSS 3.1: 9.8: not affected in 2.4.69
- CVE-2021-44790, CVSS 3.1: 9.8: fixed in 2.4.52
- CVE-2021-39275, CVSS 3.1: 9.8: fixed in 2.4.49
- CVE-2021-26691, CVSS 3.1: 9.8: not affected in 2.4.69
- CVE-2020-11984, CVSS 3.1: 9.8: not affected in 2.4.69
- CVE-2018-1312, CVSS 3.1: 9.8: not affected in 2.4.69
- CVE-2017-7679, CVSS 3.0: 9.8: fixed in 2.4.26
- CVE-2017-3169, CVSS 3.0: 9.8: not affected in 2.4.69
- CVE-2017-3167, CVSS 3.1: 9.8: fixed in 2.4.26
- CVE-2026-42535, CVSS 3.1: 9.1: fixed in 2.4.68
- CVE-2025-23048, CVSS 3.1: 9.1: fixed in 2.4.64
- CVE-2022-28615, CVSS 3.1: 9.1: fixed in 2.4.54
- CVE-2022-22721, CVSS 3.1: 9.1: not affected in 2.4.69
- CVE-2019-10082, CVSS 3.1: 9.1: not affected in 2.4.69
- CVE-2017-9788, CVSS 3.0: 9.1: not affected in 2.4.69
- CVE-2022-36760, CVSS 3.1: 9.0: fixed in 2.4.55
- CVE-2026-93546, CVSS 3.1: 8.8: fixed in 2.4.69
- CVE-2026-24072, CVSS 3.1: 8.8: fixed in 2.4.67
- CVE-2026-23918, CVSS 3.1: 8.8: not affected in 2.4.69
- CVE-2025-58098, CVSS 3.1: 8.3: fixed in 2.4.66
- CVE-2021-44224, CVSS 3.1: 8.2: fixed in 2.4.52
- CVE-2026-73636, CVSS 3.1: 8.1: fixed in 2.4.69
- CVE-2024-38473, CVSS 3.1: 8.1: fixed in 2.4.60
- CVE-2017-15715, CVSS 3.0: 8.1: not affected in 2.4.69
- CVE-2016-5387, CVSS 3.1: 8.1: not affected in 2.4.69
- CVE-2026-63718, CVSS 3.1: 7.5: fixed in 2.4.69
- CVE-2026-63686, CVSS 3.1: 7.5: fixed in 2.4.69
- CVE-2026-63292, CVSS 3.1: 7.5: fixed in 2.4.69
- CVE-2026-63045, CVSS 3.1: 7.5: fixed in 2.4.69
- CVE-2026-59685, CVSS 3.1: 7.5: fixed in 2.4.69
- CVE-2026-56449, CVSS 3.1: 7.5: fixed in 2.4.69
- CVE-2026-56153, CVSS 3.1: 7.5: fixed in 2.4.69
- CVE-2026-49975, CVSS 3.1: 7.5: fixed in 2.4.68
- CVE-2026-48005, CVSS 3.1: 7.5: fixed in 2.4.69
- CVE-2026-47360, CVSS 3.1: 7.5: fixed in 2.4.69
- CVE-2026-46729, CVSS 3.1: 7.5: fixed in 2.4.69
- CVE-2026-42536, CVSS 3.1: 7.5: fixed in 2.4.68
- CVE-2026-34356, CVSS 3.1: 7.5: fixed in 2.4.68
- CVE-2026-34355, CVSS 3.1: 7.5: fixed in 2.4.68
- CVE-2026-34059, CVSS 3.1: 7.5: fixed in 2.4.67
- CVE-2026-29169, CVSS 3.1: 7.5: fixed in 2.4.67
- CVE-2025-59775, CVSS 3.1: 7.5: fixed in 2.4.66
- CVE-2025-55753, CVSS 3.1: 7.5: fixed in 2.4.66
- CVE-2025-53020, CVSS 3.1: 7.5: fixed in 2.4.64
- CVE-2025-49630, CVSS 3.1: 7.5: fixed in 2.4.64
- CVE-2024-47252, CVSS 3.1: 7.5: fixed in 2.4.64
- CVE-2024-43394, CVSS 3.1: 7.5: fixed in 2.4.64
- CVE-2024-43204, CVSS 3.1: 7.5: fixed in 2.4.64
- CVE-2024-42516, CVSS 3.1: 7.5: fixed in 2.4.64
- CVE-2024-40898, CVSS 3.1: 7.5: fixed in 2.4.62
- CVE-2024-39573, CVSS 3.1: 7.5: fixed in 2.4.60
- CVE-2024-38477, CVSS 3.1: 7.5: fixed in 2.4.60
- CVE-2024-38472, CVSS 3.1: 7.5: fixed in 2.4.60
- CVE-2024-27316, CVSS 3.1: 7.5: fixed in 2.4.59
- CVE-2023-43622, CVSS 3.1: 7.5: fixed in 2.4.58
- CVE-2023-31122, CVSS 3.1: 7.5: fixed in 2.4.58
- CVE-2023-27522, CVSS 3.1: 7.5: fixed in 2.4.56
- CVE-2022-30556, CVSS 3.1: 7.5: fixed in 2.4.54
- CVE-2022-30522, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2022-29404, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2022-26377, CVSS 3.1: 7.5: fixed in 2.4.54
- CVE-2022-22719, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2021-41524, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2021-36160, CVSS 3.1: 7.5: fixed in 2.4.49
- CVE-2021-34798, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2021-33193, CVSS 3.1: 7.5: fixed in 2.4.49
- CVE-2021-31618, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2021-26690, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2020-9490, CVSS 3.1: 7.5: fixed in 2.4.46
- CVE-2020-13950, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2020-11993, CVSS 3.1: 7.5: fixed in 2.4.44
- CVE-2019-9517, CVSS 3.1: 7.5: fixed in 2.4.40
- CVE-2019-10081, CVSS 3.0: 7.5: not affected in 2.4.69
- CVE-2019-0217, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2019-0215, CVSS 3.0: 7.5: not affected in 2.4.69
- CVE-2019-0190, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2018-8011, CVSS 3.0: 7.5: not affected in 2.4.69
- CVE-2018-17199, CVSS 3.0: 7.5: not affected in 2.4.69
- CVE-2018-1333, CVSS 3.0: 7.5: not affected in 2.4.69
- CVE-2018-1303, CVSS 3.0: 7.5: not affected in 2.4.69
- CVE-2017-9798, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2017-9789, CVSS 3.0: 7.5: not affected in 2.4.69
- CVE-2017-7668, CVSS 3.1: 7.5: not affected in 2.4.69
- CVE-2017-7659, CVSS 3.0: 7.5: not affected in 2.4.69
And 82 more.
28 vulnerabilities of Apache HTTP Server have no version information in the NVD and are not assigned to any branch.
Get notified
Add Apache HTTP Server with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Apache HTTP Server 2.4