https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:53:41.292317+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:64809 ALSA-2026:64809 — Moderate: expat security update 2026-10-02T15:53:41.570244+00:00

Affected: AlmaLinux:8: expat, AlmaLinux:8: expat-devel

Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219) * expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026-56132)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2026-50219 BELL-CVE-2026-50219 2026-10-02T15:53:41.570310+00:00

Affected: Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat

 https://cve.radiocsirt.org/vuln/euvd-2026-324542 EUVD-2026-324542 2026-10-02T15:53:41.570341+00:00 EUVD-2026-324542 https://cve.radiocsirt.org/vuln/fkie_cve-2026-50219 fkie_cve-2026-50219 2026-10-02T15:53:41.570355+00:00

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

 https://cve.radiocsirt.org/vuln/ghsa-v3cw-2f3g-f38x GHSA-v3cw-2f3g-f38x 2026-10-02T15:53:41.570376+00:00

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-50219 msrc_CVE-2026-50219 — libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_Par… 2026-10-02T15:53:41.570391+00:00 msrc_CVE-2026-50219 https://cve.radiocsirt.org/vuln/oesa-2026-2680 OESA-2026-2680 — expat security update 2026-10-02T15:53:41.570410+00:00

Affected: openEuler:20.03-LTS-SP4: expat, openEuler:22.03-LTS-SP4: expat, openEuler:24.03-LTS-SP1: expat, openEuler:24.03-LTS-SP3: expat

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fix(es):

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,(CVE-2026-50219)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11584-1 openSUSE-SU-2026:11584-1 — expat-2.8.2-1.1 on GA media 2026-10-02T15:53:41.570436+00:00

expat-2.8.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:30647 RHSA-2026:30647 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-02T15:53:41.570461+00:00

expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

 https://cve.radiocsirt.org/vuln/rlsa-2026:64809 RLSA-2026:64809 — Moderate: expat security update 2026-10-02T15:53:41.570566+00:00

Affected: Rocky Linux:8: expat

Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219)

* expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026-56132)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:23894-1 SUSE-SU-2026:23894-1 — Security update for expat 2026-10-02T15:53:41.570596+00:00

Security update for expat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-50219 UBUNTU-CVE-2026-50219 2026-10-02T15:53:41.570622+00:00

Affected: Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: expat, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: expat, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3 and 64 more

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2025 WID-SEC-W-2026-2025 — libexpat: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-02T15:53:41.570716+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in libexpat ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Manipulation von Daten, die Umgehung von Sicherheitsmaßnahmen, die Offenlegung vertraulicher Informationen oder die Herbeiführung eines Denial-of-Service-Zustands.