https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:54:05.124444+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-72522 BELL-CVE-2026-72522 2026-10-02T10:54:05.381188+00:00

Affected: Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat

 https://cve.radiocsirt.org/vuln/euvd-2026-351985 EUVD-2026-351985 2026-10-02T10:54:05.381246+00:00 EUVD-2026-351985 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72522 fkie_cve-2026-72522 2026-10-02T10:54:05.381261+00:00

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.

 https://cve.radiocsirt.org/vuln/ghsa-v867-w97p-3vx2 GHSA-v867-w97p-3vx2 2026-10-02T10:54:05.381286+00:00

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-72522 msrc_CVE-2026-72522 — libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same… 2026-10-02T10:54:05.381300+00:00 msrc_CVE-2026-72522 https://cve.radiocsirt.org/vuln/oesa-2026-3403 OESA-2026-3403 — expat security update 2026-10-02T10:54:05.381318+00:00

Affected: openEuler:24.03-LTS-SP4: expat, openEuler:20.03-LTS-SP4: expat, openEuler:22.03-LTS-SP4: expat, openEuler:24.03-LTS-SP1: expat, openEuler:24.03-LTS-SP3: expat

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fix(es):

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.(CVE-2026-72522)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11733-1 openSUSE-SU-2026:11733-1 — expat-2.8.4-1.1 on GA media 2026-10-02T10:54:05.381345+00:00

expat-2.8.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:54869 RHSA-2026:54869 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-02T10:54:05.381363+00:00

expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

 https://cve.radiocsirt.org/vuln/suse-su-2026:23743-1 SUSE-SU-2026:23743-1 — Security update for python311 2026-10-02T10:54:05.381378+00:00

Security update for python311

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-72522 UBUNTU-CVE-2026-72522 2026-10-02T10:54:05.381400+00:00

Affected: Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: expat, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: expat, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3 and 57 more

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2718 WID-SEC-W-2026-2718 — expat: Schwachstelle ermöglicht Denial of Service 2026-10-02T10:54:05.381485+00:00

Ein lokaler Angreifer kann eine Schwachstelle in expat ausnutzen, um einen Denial of Service Angriff durchzuführen.