Known vulnerabilities in expat 2.4.2

Software: expat
Version: 2.4.2
Software CPE: cpe:2.3:a:libexpat_org:libexpat:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 50
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting expat version 2.4.2 expat 2.4.2 is affected by 50 vulnerabilities: 19 high, 29 medium, 2 low Critical High Medium Low

Vulnerabilities (50)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149950 - Use After Free
CVE-2026-76957
CWE-416 Medium
No
No
2.8.4 15.09.2026 SB2026091530
SB2026091543
SB2026091544
and 6 more
#VU149947 - Inefficient Algorithmic Complexity
CVE-2026-76641
CWE-407 Medium
No
No
2.8.4 15.09.2026 SB2026091530
SB2026091552
SB2026091553
and 3 more
#VU149948 - Unchecked Return Value
CVE-2026-76956
CWE-252 Medium
No
No
2.8.4 15.09.2026 SB2026091530
SB2026091543
SB2026091544
and 1 more
#VU149946 - Inefficient Algorithmic Complexity
CVE-2026-66046
CWE-407 Medium
No
No
2.8.4 15.09.2026 SB2026091530
SB2026091552
SB2026091553
and 3 more
#VU144338 - Protection Mechanism Failure
CVE-2026-50219
CWE-693 Medium
No
No
2.8.2 19.08.2026 SB2026081992
SB2026081995
SB2026081997
and 18 more
#VU144339 - Protection Mechanism Failure
CVE-2026-56131
CWE-693 Medium
No
No
2.8.2 19.08.2026 SB2026081992
SB2026081995
SB20260819108
and 9 more
#VU144340 - Out-of-bounds write
CVE-2026-56132
CWE-787 High
No
No
2.8.2 19.08.2026 SB2026081992
SB2026081995
SB2026081997
and 7 more
#VU144341 - Integer overflow
CVE-2026-56403
CWE-190 Medium
No
No
2.8.2 19.08.2026 SB2026081992
SB2026081995
SB20260819116
and 5 more
#VU144342 - Integer overflow
CVE-2026-56404
CWE-190 Medium
No
No
2.8.2 19.08.2026 SB2026081992
SB2026081995
SB20260819116
and 4 more
#VU144343 - Integer overflow
CVE-2026-56405
CWE-190 Medium
No
No
2.8.2 19.08.2026 SB2026081992
SB2026081995
SB20260819116
and 5 more
#VU144344 - Integer overflow
CVE-2026-56406
CWE-190 Medium
No
No
2.8.2 19.08.2026 SB2026081992
SB2026081995
SB20260819116
and 5 more
#VU144345 - Integer overflow
CVE-2026-56407
CWE-190 Medium
No
No
2.8.2 19.08.2026 SB2026081992
SB2026081995
SB20260819116
and 4 more
#VU144346 - Integer overflow
CVE-2026-56408
CWE-190 Medium
No
No
2.8.2 19.08.2026 SB2026081992
SB2026081995
SB20260819116
and 4 more
#VU144347 - Integer overflow
CVE-2026-56409
CWE-190 Medium
No
No
2.8.2 19.08.2026 SB2026081992
SB20260819116
SB20260819117
and 3 more
#VU144348 - Integer overflow
CVE-2026-56410
CWE-190 Medium
No
No
2.8.2 19.08.2026 SB2026081992
SB20260819116
SB20260819117
and 3 more
#VU144349 - Integer overflow
CVE-2026-56411
CWE-190 Medium
No
No
2.8.2 19.08.2026 SB2026081992
SB20260819116
SB20260819117
and 3 more
#VU144350 - Protection Mechanism Failure
CVE-2026-56412
CWE-693 Medium
Public exploit available
No
2.8.2 19.08.2026 SB2026081992
SB2026081995
SB2026081997
and 12 more
#VU128246 - Insufficient Entropy
CVE-2026-41080
CWE-331 Low
No
No
2.8.0 27.04.2026 SB20260427193
SB2026051240
SB2026051270
and 15 more
#VU124277 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-32777
CWE-835 Medium
No
No
2.7.5 24.03.2026 SB2026032435
SB2026032436
SB2026032437
and 25 more
#VU124274 - NULL Pointer Dereference
CVE-2026-32776
CWE-476 Medium
No
No
2.7.5 24.03.2026 SB2026032435
SB2026032765
SB2026033028
and 22 more


Showing elements 1 - 20 out of 50