Product by Ubuntu
Expat
25 known vulnerabilities in Expat (Ubuntu), 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-25236 | libexpat Project libexpat: security vulnerability | 9.8 | |
| Critical | CVE-2022-25235 | libexpat Project libexpat: security vulnerability | 9.8 | |
| High | CVE-2025-59375 | libexpat Project libexpat: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-66046 | Expat Denial of Service via storeAtts() Quadratic Complexity | 7.5 | |
| High | CVE-2026-76641 | Expat Out-of-Bounds Read via dtdCopy | 7.5 | |
| Medium | CVE-2026-72522 | libexpat Project libexpat: Out-of-bounds Read | 6.2 | |
| High | CVE-2026-45186 | libexpat Project libexpat: Inefficient Algorithmic Complexity | 2.9 | |
| High | CVE-2026-76957 | libexpat Project libexpat: Use After Free | 4.9 | |
| Medium | CVE-2026-56407 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56406 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56403 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56404 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56411 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56410 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56408 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56405 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-56132 | libexpat Project libexpat: Incorrect Synchronization | 6.9 | |
| Low | CVE-2026-41080 | libexpat Project libexpat: Insufficient Entropy | 2.9 | |
| Medium | CVE-2026-56409 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.5 | |
| Medium | CVE-2026-56412 | libexpat Project libexpat: Use After Free | 5.9 | |
| Medium | CVE-2026-56131 | libexpat Project libexpat: Use After Free | 4.9 | |
| Medium | CVE-2026-50219 | libexpat Project libexpat: Use After Free | 4.9 | |
| Medium | CVE-2026-32777 | libexpat Project libexpat: Infinite Loop | 4.0 | |
| Medium | CVE-2026-32776 | libexpat Project libexpat: NULL Pointer Dereference | 4.0 | |
| Low | CVE-2026-32778 | libexpat Project libexpat: NULL Pointer Dereference | 2.9 |