Red Hat JBoss Core Services 2.4.62.SP5 vulnerabilities

3 known vulnerabilities in Red Hat JBoss Core Services 2.4.62.SP5 from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Apache HTTP Server: Buffer Over-read

  CVE-2026-44185Jun 8, 2026Apache

  Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

• 7.5 High severity

  Apache HTTP Server: Heap-based Buffer Overflow

  CVE-2026-42536Jun 8, 2026ApacheEPSS 1.02%

  Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

• 7.5 High severity

  Apache HTTP Server: Heap-based Buffer Overflow

  CVE-2026-34355Jun 8, 2026ApacheEPSS 1.16%

  A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.