Výsledky hledání

zdroj: Microsoft Security× výrobce: libexpat× v celém archivu zrušit filtry

9 karet z 9 položek CZ · EN/orig

11. 8. 2026 1

CVE-2026-72522 libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.

Information published.

EPSS 0.00 CVE-2026-72522 libexpat US

Microsoft Security · 11. 8. 10:08

27. 6. 2026 3

CVE-2026-56403 libexpat before 2.8.2 has an integer overflow in storeAtts.

Information published.

EPSS 0.00 CVE-2026-56403 libexpat US

Microsoft Security · 27. 6. 10:06

CVE-2026-56406 libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

Information published.

EPSS 0.00 CVE-2026-56406 libexpat US

Microsoft Security · 27. 6. 10:05

CVE-2026-56405 libexpat before 2.8.2 has an integer overflow in getAttributeId.

Information published.

EPSS 0.00 CVE-2026-56405 libexpat US

Microsoft Security · 27. 6. 10:04

5. 6. 2026 3

CVE-2026-50219 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

Information published.

EPSS 0.00 CVE-2026-50219 libexpat US

Microsoft Security · 5. 6. 10:02

CVE-2026-56412 libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.

Information published.

EPSS 0.00 CVE-2026-50219 CVE-2026-56412 libexpat US

Microsoft Security · 5. 6. 10:02

CVE-2026-56131 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

Information published.

EPSS 0.00 CVE-2026-50219 CVE-2026-56131 libexpat US

Microsoft Security · 5. 6. 10:02

11. 5. 2026 1

CVE-2026-45186 In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

Information published.

EPSS 0.00 CVE-2026-45186 libexpat US

Microsoft Security · 11. 5. 10:03

18. 4. 2026 1

CVE-2026-41080 libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

Information published.

EPSS 0.00 CVE-2026-41080 libexpat US

Microsoft Security · 18. 4. 10:01