CVE-2026-113351Medium· 5.9▾ SunlitA flaw was found in expat. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a large XML document to an application that reuses parser instances. When the XML parser is reset using XML_ParserReset…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in expat. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a large XML document to an application that reuses parser instances. When the XML parser is reset using XML_ParserReset, it clears the direct byte count but fails to offset tracked heap allocations. Consequently, subsequent parsing operations on the reused parser fail with out-of-memory errors until the parser is completely recreated.
expat: expat: Denial of Service via improper memory tracking in XML_ParserReset — rated Moderate by Red Hat. Released 2026-10-20.
Affected:
No fix planned:
Out of support scope
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98558Medium· 4.1kernel: net: flush skb_defer_nodes in dev_cpu_dead() (CVE-2026-98558)
CVE-2026-98595Low· 3.3kernel: udp: remove a disconnected socket from the 4-tuple hash table (CVE-2026-98595)
CVE-2026-80706Medium· 5.5kernel: can: softing: fw_parse(): validate firmware record spans (CVE-2026-80706)
CVE-2026-97380High· 8.8mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement (CVE-2026-97380)
CVE-2025-37915Medium· 6.3kernel: net_sched: drr: Fix double list add in class with netem as child qdisc (CVE-2025-37915)
CVE-2025-37913Medium· 6.3kernel: net_sched: qfq: Fix double list add in class with netem as child qdisc (CVE-2025-37913)