Libexpat Project

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 65
    Known Exploited: 0
    9
    Critical Level Threats
    21
    High Level Threats
    30
    Medium Level Threats
    5
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-76957

    libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

    Last Modified: Aug 20, 2026
    Published: Aug 20, 2026

    CVE-2026-76956

    In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.

    Last Modified: Aug 20, 2026
    Published: Aug 20, 2026

    CVE-2026-66046

    Expat Denial of Service via storeAtts() Quadratic Complexity

    Last Modified: Aug 21, 2026
    Published: Aug 18, 2026

    CVE-2026-72522

    expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

    Last Modified: Aug 13, 2026
    Published: Aug 10, 2026

    CVE-2026-56412

    Use-After-Free Vulnerability in libexpat Due to Missing Depth Tracking

    Last Modified: Jun 22, 2026
    Published: Jun 21, 2026
    Items Per Page