The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade expatUpgrade qt6-qtwebengine | Feb 4, 2026 | Jan 30, 2026 |
| Amazon Linux Ami 2 | — | Upgrade expat-develUpgrade expat-debuginfoUpgrade expatUpgrade firefoxUpgrade expat-staticUpgrade thunderbird | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade expat-debuginfoUpgrade expat-staticUpgrade expat-develUpgrade firefoxUpgrade expat-debugsourceUpgrade firefox-debugsourceUpgrade expatUpgrade firefox-debuginfo | Feb 20, 2026 | Jan 30, 2026 |
| Debian | — | Upgrade expat | Aug 2, 2026 | Jan 30, 2026 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jul 15, 2026 | Jul 14, 2026 |
| Freebsd | — | Upgrade qt6-webengineUpgrade qt6-pdfUpgrade expat | Aug 20, 2026 | Aug 20, 2026 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory18Apply the fix or workaround for perl_advisory13 | Mar 18, 2026 | Mar 17, 2026 |
| Ubuntu | — | Upgrade expat (Ubuntu Pro)Upgrade libexpat1Upgrade lib64expat1 (Ubuntu Pro)Upgrade expatUpgrade libxmltok1t64 (Ubuntu Pro)Upgrade libexpat1 (Ubuntu Pro)Upgrade libxmltok1 (Ubuntu Pro) | Feb 12, 2026 | Jan 30, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 30, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub