libexpat vulnerabilities
9 published CVEs name libexpat among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 0Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124317
libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16
libexpat · libexpat
Medium6.3 - CVE-2026-118370
libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes
libexpat · libexpat
High8.2 - CVE-2026-117610
libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser
libexpat · libexpat
High8.2 - CVE-2026-115506
libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay
libexpat · libexpat
High8.7 - CVE-2026-113351
libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset
libexpat · libexpat
High8.2 - CVE-2026-77214
libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer
libexpat · libexpat
High8.3 - CVE-2026-102633
libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc
libexpat · libexpat
High8.2 - CVE-2026-93990
Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate
libexpat · libexpat
High8.7 - CVE-2026-76641
Expat Out-of-Bounds Read via dtdCopy
libexpat · libexpat
High8.7