E
Expat
Security Risk Profile
49
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 47 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 31, 2015 to present
47
Total CVEs
10
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
49/100
medium
🆕 1Fresh (<7d)📈 6 in Last 30 Days
Severity Distribution
Critical
0High
10Medium
21Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Integer Overflow
12
2
Use After Free
5
3
Buffer Overflow
3
4
Input Validation
2
5
Race Condition
1
Most Affected Products
1. Expat libexpat31
2. debian/expat16
3. Libexpat Project Libexpat16
4. Expat Expat15
5. Microsoft azl3 expat 2.6.4-614
Recent Vulnerabilities
See more →CVE-2026-77214
CVSS 8.3high
libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer
Oct 7, 2026
https://seclists.org/oss-sec/2026/q4/55
unknown
libexpat 2.9.0 fixes two vulnerabilities
Oct 5, 2026🔧 No Patch
CVE-2026-102633
CVSS 8.2high
libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc
Sep 29, 2026
https://seclists.org/oss-sec/2026/q3/863
unknown
libexpat 2.8.5 fixes CVE-2026-93990 (malformed UTF-16 smuggling)
Sep 22, 2026🔧 No Patch
CVE-2026-93990
CVSS 8.7EPSS 0%high
Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate
Sep 19, 2026
CVE-2026-76641
CVSS 8.7high
Expat Out-of-Bounds Read via dtdCopy
Aug 20, 2026
CVE-2026-56412
CVSS 5.9medium
Jun 21, 2026
CVE-2026-56411
CVSS 6.9medium
Jun 21, 2026
CVE-2026-56410
CVSS 6.9medium
Jun 21, 2026
CVE-2026-56409
CVSS 6.5medium
Jun 21, 2026
Monitor Expat in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.