libexpat
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 6
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/24/2026, libexpat recorded 6 security vulnerabilities in the last 90 days across 1 products, including 6 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, libexpat had the most security vulnerabilities in the libexpat ecosystem, with 6 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-115506libexpat through 2.9.0 Denial of Service via Billion Laughs Detection DelayCVE-2026-113351libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserResetCVE-2026-77214libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBufferCVE-2026-102633libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_reallocCVE-2026-93990Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-115506libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay | Exploitation statusActively exploited | FixYes | Affected productlibexpat | Published10/22/2026 | SeverityHigh |
CVE-2026-113351libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset | Exploitation statusNot exploited | FixYes | Affected productlibexpat | Published | |
CVE-2026-77214libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer | Exploitation statusNot exploited | FixYes | Affected productlibexpat | Published10/07/2026 | |
CVE-2026-102633libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc | Exploitation statusNot exploited | FixYes | Affected productlibexpat | Published09/29/2026 | |
CVE-2026-93990Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate | Exploitation statusNot exploited | FixYes | Affected productlibexpat | Published | |
CVE-2026-76641Expat Out-of-Bounds Read via dtdCopy | Exploitation statusNot exploited | FixYes | Affected productlibexpat | Published08/20/2026 | |
CVE-2024-45492CVE-2024-45492 | Exploitation statusNot exploited | FixNo | Affected product- | Published08/30/2024 | SeverityHigh |
CVE-2024-45491CVE-2024-45491 | Exploitation statusNot exploited | FixNo | Affected product- | Published08/30/2024 | SeverityHigh |
8 Results | Page 1 of 1
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |