Product by Open Source
Expat
30 known vulnerabilities in Expat (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
30
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-59375 | libexpat Project libexpat: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2024-8176 | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat | 7.5 | |
| High | CVE-2026-115506 | libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay | 7.5 | |
| High | CVE-2026-113351 | libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset | 5.9 | |
| High | CVE-2026-93990 | Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate | 7.5 | |
| High | CVE-2026-118370 | libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes | 5.9 | |
| High | CVE-2026-117610 | libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser | 5.9 | |
| High | CVE-2026-76641 | Expat Out-of-Bounds Read via dtdCopy | 7.5 | |
| High | CVE-2026-102633 | libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc | 5.9 | |
| High | CVE-2026-77214 | libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer | 8.2 | |
| High | CVE-2026-76956 | libexpat Project libexpat: Unexpected Status Code or Return Value | 7.5 | |
| High | CVE-2026-25210 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-72522 | libexpat Project libexpat: Out-of-bounds Read | 6.2 | |
| High | CVE-2026-45186 | libexpat Project libexpat: Inefficient Algorithmic Complexity | 2.9 | |
| High | CVE-2026-76957 | libexpat Project libexpat: Use After Free | 4.9 | |
| Medium | CVE-2026-56407 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56406 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56403 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56411 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56404 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Low | CVE-2026-41080 | libexpat Project libexpat: Insufficient Entropy | 2.9 | |
| Medium | CVE-2026-56410 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56408 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56405 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56132 | libexpat Project libexpat: Incorrect Synchronization | 6.9 |