Výsledky hledání

CVE: CVE-2026-50219× výrobce: libexpat× v celém archivu

Různé zkratky a hodnoty pod každou zprávou mají svoji legendu — pokud na údaji postojíte myší. Některé jsou klikatelné. Typicky CVE.

zdroj

země

sektor

hledat

jen s CVE

jen KEV

zrušit filtry

3 karet z 3 položek

5. 6. 2026 3

CVE-2026-50219 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

Information published.

EPSS 0.00 CVE-2026-50219 libexpat US

Microsoft Security · 5. 6. 10:02

CVE-2026-56412 libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.

Information published.

EPSS 0.00 CVE-2026-50219 CVE-2026-56412 libexpat US

Microsoft Security · 5. 6. 10:02

CVE-2026-56131 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

Information published.

EPSS 0.00 CVE-2026-50219 CVE-2026-56131 libexpat US

Microsoft Security · 5. 6. 10:02