Výsledky hledání

výrobce: libexpat× v celém archivu

Různé zkratky a hodnoty pod každou zprávou mají svoji legendu — pokud na údaji postojíte myší. Některé jsou klikatelné. Typicky CVE.

zdroj

země

sektor

hledat

jen s CVE

jen KEV

zrušit filtry

10 karet z 10 položek

1. 9. 2026 1

Sanata vulnerabilità in libexpat

Aggiornamenti di sicurezza sanano una vulnerabilità in libexpat, nota libreria scritta in C per l'analisi di documenti XML. Tale vulnerabilità, qualora sfruttata, consentirebbe ad utente malintenzionato di innescare la corruzione della memoria o il crash dell'applicazione, portando alla compromissione della disponibilità del servizio sulle istanze interessate.

EPSS 0.00 CVE-2026-76641 libexpat IT

tg: zranitelnost

CSIRT Itálie (ACN) · 1. 9. 10:40

11. 8. 2026 1

CVE-2026-72522 libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.

Information published.

EPSS 0.00 CVE-2026-72522 libexpat US

Microsoft Security · 11. 8. 10:08

27. 6. 2026 3

CVE-2026-56403 libexpat before 2.8.2 has an integer overflow in storeAtts.

Information published.

EPSS 0.00 CVE-2026-56403 libexpat US

Microsoft Security · 27. 6. 10:06

CVE-2026-56406 libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

Information published.

EPSS 0.00 CVE-2026-56406 libexpat US

Microsoft Security · 27. 6. 10:05

CVE-2026-56405 libexpat before 2.8.2 has an integer overflow in getAttributeId.

Information published.

EPSS 0.00 CVE-2026-56405 libexpat US

Microsoft Security · 27. 6. 10:04

5. 6. 2026 3

CVE-2026-50219 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

Information published.

EPSS 0.00 CVE-2026-50219 libexpat US

Microsoft Security · 5. 6. 10:02

CVE-2026-56412 libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.

Information published.

EPSS 0.00 CVE-2026-50219 CVE-2026-56412 libexpat US

Microsoft Security · 5. 6. 10:02

CVE-2026-56131 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

Information published.

EPSS 0.00 CVE-2026-50219 CVE-2026-56131 libexpat US

Microsoft Security · 5. 6. 10:02

11. 5. 2026 1

CVE-2026-45186 In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

Information published.

EPSS 0.00 CVE-2026-45186 libexpat US

Microsoft Security · 11. 5. 10:03

18. 4. 2026 1

CVE-2026-41080 libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

Information published.

EPSS 0.00 CVE-2026-41080 libexpat US

Microsoft Security · 18. 4. 10:01