Ein lokaler Angreifer kann mehrere Schwachstellen in libexpat ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Manipulation von Daten, die Umgehung von Sicherheitsmaßnahmen, die Offenlegung vertraulicher Informationen oder die Herbeiführung eines Denial-of-Service-Zustands.
[UPDATE] [mittel] libexpat: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-20 11:06 UTC
- Importiert: 2026-10-21 13:03 UTC
- Quelle-ID:
cert_bund - uid_hash:
95157cf8c33540d61cb72abd7c094a7f4e910386fdd6a9254594592f0543082b
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
MEDIUM |
MEDIUM |
4.9 |
2026-06-04 |
||||
MEDIUM |
MEDIUM |
6.9 |
2026-06-21 |
||||
MEDIUM |
MEDIUM |
6.9 |
2026-06-21 |
||||
MEDIUM |
MEDIUM |
6.9 |
2026-06-21 |
||||
MEDIUM |
MEDIUM |
6.9 |
2026-06-21 |
||||
MEDIUM |
MEDIUM |
6.9 |
2026-06-21 |
||||
MEDIUM |
MEDIUM |
6.9 |
2026-06-21 |
||||
MEDIUM |
MEDIUM |
6.5 |
2026-06-21 |
||||
MEDIUM |
MEDIUM |
6.9 |
2026-06-21 |
||||
MEDIUM |
MEDIUM |
6.9 |
2026-06-21 |
||||
MEDIUM |
MEDIUM |
4.9 |
2026-06-21 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
Amazon Linux Security Advisory ALAS2-2026-3800 vom 2026-07-21 |
EXTERNAL | - | wid_csaf |
Amazon Linux Security Advisory ALAS2-2026-3880 vom 2026-09-01 |
EXTERNAL | - | wid_csaf |
Amazon Linux Security Advisory ALAS2FIREFOX-2026-064 vom 2026-09-01 |
EXTERNAL | - | wid_csaf |
Rocky Linux Security Advisory RLSA-2026:64809 vom 2026-09-09 |
EXTERNAL | - | wid_csaf |
Rocky Linux Security Advisory RLSA-2026:64810 vom 2026-09-09 |
EXTERNAL | - | wid_csaf |
Rocky Linux Security Advisory RLSA-2026:64812 vom 2026-09-09 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
Oracle Linux Security Advisory ELSA-2026-64809 vom 2026-09-09 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-64810 vom 2026-09-08 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-64812 vom 2026-09-09 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-74001 vom 2026-10-01 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |