CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

XMLSoft — security advisories

2 advisorieslatest 2026-06-09⚡ RSS feed

Tracked XMLSoft products:

⚡ Watch XMLSoft

Get an email when a new XMLSoft advisory drops — max one per day, one-click unsubscribe.

CVE-2026-56406: libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

mediumCVSS 6.9CVE-2026-56406msrc2026-06-09

CVE-2026-56409: xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.

mediumCVSS 6.5CVE-2026-56409msrc2026-06-09

XMLSoft security advisories · CSIRTS