L
Vendor security profile
libexpat
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs20
Critical1
CISA KEV0
Public exploit7
Patch rate%80
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
3
1
1
1
0
5
2
1
CVE KEV
CVE severity distribution
20toplam CVE
Critical1 (5%)
High8 (40%)
Medium9 (45%)
Low2 (10%)
Patch and exploitation view
%80
Verified patch
%0
CISA KEV
%35
Public exploit
16Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
8.3
CVE-2026-77214
libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer
L
Patch verifiedEPSS %1
8.2
CVE-2026-102633
libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc
L
Patch verifiedEPSS %0
8.7
CVE-2026-93990
Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate
L
Patch verifiedEPSS %0
8.7
CVE-2026-76641
Expat Out-of-Bounds Read via dtdCopy
L
Patch verifiedEPSS %0
4.9
CVE-2026-76957
Use after free in Libexpat Project
LP
Patch verifiedEPSS %0
5.9
CVE-2026-76956
Vulnerability in Libexpat Project
LP
Patch verifiedEPSS %0
8.7
CVE-2026-66046
Expat Denial of Service via storeAtts() Quadratic Complexity
LP
Patch verifiedEPSS %1
6.2
CVE-2026-72522
Out-of-bounds read in Libexpat Project
LP
Patch status unknownEPSS %0
5.9
CVE-2026-50219
Use after free in Libexpat Project
LP
Patch verifiedEPSS %0
2.9
CVE-2026-45186
Vulnerability in Libexpat Project
LP
Patch verifiedEPSS %0