Every CVE Search/ Get API key

CVE-2022-25235

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...

9.8 CriticalPublic exploitFix available

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

4.96%Up 4.1 points since Feb 16, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
CVE-2022-25235
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-116
Updated
2026-11-02
CVE List 9.8

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
CVE-2022-25235
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-116
Updated
2026-11-02
EUVDEUVD-2022-29933 9.8

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
EUVD-2022-29933
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-8mw4-grgw-m3fp 9.8

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
GHSA-8mw4-grgw-m3fp
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-116
Updated
2026-11-02
OSVALPINE-CVE-2022-25235 9.8

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
ALPINE-CVE-2022-25235
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-43681 9.8

CVE-2022-25235 affecting package ogdi 4.1.0-9

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
AZL-43681
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVAZL-44607 9.8

CVE-2022-25235 affecting package ogdi 4.1.1-3

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
AZL-44607
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVAZL-8603 9.8

CVE-2022-25235 affecting package expat for versions less than 2.4.8-1

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
AZL-8603
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2022-25235 9.8

CVE-2022-25235 does not affect BellSoft software

Record
BELL-CVE-2022-25235
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
CVE-2022-25235
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-25235 9.8

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
DEBIAN-CVE-2022-25235
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVJLSEC-2025-52 9.8

`xmltok_impl.c` in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
JLSEC-2025-52
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
OSVOESA-2022-1554 9.8

expat security update

An XML parser library.

Security Fix(es):

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.(CVE-2022-25235)

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.(CVE-2022-25236)

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.(CVE-2022-25314)

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.(CVE-2022-25313)

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.(CVE-2022-25315)

Record
OESA-2022-1554
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2022-1588 9.8

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo

Security Fix(es):

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.(CVE-2022-25235)

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.(CVE-2022-25236)

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.(CVE-2022-25315)

Record
OESA-2022-1588
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2022-2057 9.8

expat security update

This package provides with static libraries and header files for developing with expat.

Security Fix(es):

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.(CVE-2022-25235)

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.(CVE-2022-25236)

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.(CVE-2022-25314)

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.(CVE-2022-25313)

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.(CVE-2022-25315)

Record
OESA-2022-2057
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2022-2085 9.8

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo

Security Fix(es):

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.(CVE-2022-25235)

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.(CVE-2022-25236)

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.(CVE-2022-25315)

Record
OESA-2022-2085
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1815 9.8

mozjs78 security update

Security Fix(es):

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).(CVE-2021-45960)

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.(CVE-2022-25235)

Record
OESA-2024-1815
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHBA-2022:4046 9.8

Red Hat Bug Fix Advisory: new packages: expat

Record
RHBA-2022:4046
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0815 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:0815
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0816 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:0816
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0817 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:0817
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0818 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:0818
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0824 9.8

Red Hat Security Advisory: firefox security and bug fix update

Record
RHSA-2022:0824
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0843 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:0843
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0845 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:0845
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0847 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:0847
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0850 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:0850
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0853 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:0853
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0951 9.8

Red Hat Security Advisory: expat security update

Record
RHSA-2022:0951
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1012 9.8

Red Hat Security Advisory: expat security update

Record
RHSA-2022:1012
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1053 9.8

Red Hat Security Advisory: Red Hat Virtualization Host security and enhancement update [ovirt-4.4.10] Async #2

Record
RHSA-2022:1053
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1068 9.8

Red Hat Security Advisory: expat security update

Record
RHSA-2022:1068
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1069 9.8

Red Hat Security Advisory: expat security update

Record
RHSA-2022:1069
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1070 9.8

Red Hat Security Advisory: expat security update

Record
RHSA-2022:1070
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1263 9.8

Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.22

Record
RHSA-2022:1263
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1309 9.8

Red Hat Security Advisory: expat security update

Record
RHSA-2022:1309
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1539 9.8

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2022:1539
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1540 9.8

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2022:1540
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1643 9.8

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2022:1643
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1644 9.8

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2022:1644
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:7811 9.8

Red Hat Security Advisory: mingw-expat security update

Record
RHSA-2022:7811
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:0818 9.8

Critical: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 91.7.0 ESR.

Security Fix(es):

  • Mozilla: Use-after-free in XSLT parameter processing (CVE-2022-26485)

  • Mozilla: Use-after-free in WebGPU IPC Framework (CVE-2022-26486)

  • expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)

  • expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution (CVE-2022-25236)

  • expat: Integer overflow in storeRawNames() (CVE-2022-25315)

  • Mozilla: Use-after-free in text reflows (CVE-2022-26381)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-26383)

  • Mozilla: iframe allow-scripts sandbox bypass (CVE-2022-26384)

  • Mozilla: Time-of-check time-of-use bug when verifying add-on signatures (CVE-2022-26387)

  • Mozilla: Temporary files downloaded to /tmp and accessible by other local users (CVE-2022-26386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:0818
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:0845 9.8

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.7.0.

Security Fix(es):

  • Mozilla: Use-after-free in XSLT parameter processing (CVE-2022-26485)

  • Mozilla: Use-after-free in WebGPU IPC Framework (CVE-2022-26486)

  • expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)

  • expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution (CVE-2022-25236)

  • expat: Integer overflow in storeRawNames() (CVE-2022-25315)

  • Mozilla: Use-after-free in text reflows (CVE-2022-26381)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-26383)

  • Mozilla: iframe allow-scripts sandbox bypass (CVE-2022-26384)

  • Mozilla: Time-of-check time-of-use bug when verifying add-on signatures (CVE-2022-26387)

  • thunderbird: Crafted email could trigger an out-of-bounds write (CVE-2022-0566)

  • Mozilla: Temporary files downloaded to /tmp and accessible by other local users (CVE-2022-26386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:0845
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:0951 9.8

Important: expat security update

Expat is a C library for parsing XML documents.

Security Fix(es):

  • expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)

  • expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution (CVE-2022-25236)

  • expat: Integer overflow in storeRawNames() (CVE-2022-25315)

  • expat: Large number of prefixed XML attributes on a single tag can crash libexpat (CVE-2021-45960)

  • expat: Integer overflow in doProlog in xmlparse.c (CVE-2021-46143)

  • expat: Integer overflow in addBinding in xmlparse.c (CVE-2022-22822)

  • expat: Integer overflow in build_model in xmlparse.c (CVE-2022-22823)

  • expat: Integer overflow in defineAttribute in xmlparse.c (CVE-2022-22824)

  • expat: Integer overflow in lookup in xmlparse.c (CVE-2022-22825)

  • expat: Integer overflow in nextScaffoldPart in xmlparse.c (CVE-2022-22826)

  • expat: Integer overflow in storeAtts in xmlparse.c (CVE-2022-22827)

  • expat: Integer overflow in function XML_GetBuffer (CVE-2022-23852)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:0951
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:1643 9.8

Important: xmlrpc-c security update

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

  • expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:1643
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-25235 9.8

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

Record
UBUNTU-CVE-2022-25235
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2022:0818 No score

Critical: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 91.7.0 ESR.

Security Fix(es):

  • Mozilla: Use-after-free in XSLT parameter processing (CVE-2022-26485)

  • Mozilla: Use-after-free in WebGPU IPC Framework (CVE-2022-26486)

  • expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)

  • expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution (CVE-2022-25236)

  • expat: Integer overflow in storeRawNames() (CVE-2022-25315)

  • Mozilla: Use-after-free in text reflows (CVE-2022-26381)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-26383)

  • Mozilla: iframe allow-scripts sandbox bypass (CVE-2022-26384)

  • Mozilla: Time-of-check time-of-use bug when verifying add-on signatures (CVE-2022-26387)

  • Mozilla: Temporary files downloaded to /tmp and accessible by other local users (CVE-2022-26386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:0818
Updated
2026-11-02
OSVALSA-2022:0845 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.7.0.

Security Fix(es):

  • Mozilla: Use-after-free in XSLT parameter processing (CVE-2022-26485)

  • Mozilla: Use-after-free in WebGPU IPC Framework (CVE-2022-26486)

  • expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)

  • expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution (CVE-2022-25236)

  • expat: Integer overflow in storeRawNames() (CVE-2022-25315)

  • Mozilla: Use-after-free in text reflows (CVE-2022-26381)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-26383)

  • Mozilla: iframe allow-scripts sandbox bypass (CVE-2022-26384)

  • Mozilla: Time-of-check time-of-use bug when verifying add-on signatures (CVE-2022-26387)

  • thunderbird: Crafted email could trigger an out-of-bounds write (CVE-2022-0566)

  • Mozilla: Temporary files downloaded to /tmp and accessible by other local users (CVE-2022-26386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:0845
Updated
2026-11-02
OSVALSA-2022:0951 No score

Important: expat security update

Expat is a C library for parsing XML documents. Security Fix(es):

  • expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)
  • expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution (CVE-2022-25236)
  • expat: Integer overflow in storeRawNames() (CVE-2022-25315)
  • expat: Large number of prefixed XML attributes on a single tag can crash libexpat (CVE-2021-45960)
  • expat: Integer overflow in doProlog in xmlparse.c (CVE-2021-46143)
  • expat: Integer overflow in addBinding in xmlparse.c (CVE-2022-22822)
  • expat: Integer overflow in build_model in xmlparse.c (CVE-2022-22823)
  • expat: Integer overflow in defineAttribute in xmlparse.c (CVE-2022-22824)
  • expat: Integer overflow in lookup in xmlparse.c (CVE-2022-22825)
  • expat: Integer overflow in nextScaffoldPart in xmlparse.c (CVE-2022-22826)
  • expat: Integer overflow in storeAtts in xmlparse.c (CVE-2022-22827)
  • expat: Integer overflow in function XML_GetBuffer (CVE-2022-23852) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Record
ALSA-2022:0951
Updated
2026-11-02
OSVALSA-2022:1643 No score

Important: xmlrpc-c security update

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

  • expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:1643
Updated
2026-11-02
OSVALSA-2022:7811 No score

Important: mingw-expat security update

Expat is a C library for parsing XML documents. The mingw-expat packages provide a port of the Expat library for MinGW.

The following packages have been upgraded to a later upstream version: mingw-expat (2.4.8). (BZ#2057023, BZ#2057037, BZ#2057127)

Security Fix(es):

  • expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)
  • expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution (CVE-2022-25236)
  • expat: Integer overflow in storeRawNames() (CVE-2022-25315)
  • expat: Stack exhaustion in doctype parsing (CVE-2022-25313)
  • expat: Integer overflow in copyString() (CVE-2022-25314)
  • expat: Integer overflow in the doProlog function (CVE-2022-23990)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2022:7811
Updated
2026-11-02
OSVCLSA-2022-1660757175 No score

Fixed 15 CVEs in expat

  • CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs
  • CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution
  • CVE-2022-25315: Fix integer overflow in storeRawNames()
  • CVE-2022-22822: Fix integer overflow in addBinding()
  • CVE-2022-22823: Fix integer overflow in build_model()
  • CVE-2022-22824: Fix integer overflow in defineAttribute()
  • CVE-2022-22825: Fix integer overflow in lookup()
  • CVE-2022-22826: Fix integer overflow in nextScaffoldPart()
  • CVE-2022-22827: Fix integer overflow in storeAtts()
  • CVE-2022-23852: Fix integer overflow in XML_GetBuffer()
  • CVE-2021-46143: Fix integer overflow on m_groupSize in doProlog()
  • CVE-2021-45960: Fix troublesome left shifts in storeAtts()
  • CVE-2022-23990: Fix integer overflow in doProlog()
  • CVE-2022-25313: Fix stack exhaustion in build_model()
  • CVE-2022-25314: Fix integer overflow in copyString()
Record
CLSA-2022-1660757175
Updated
2026-11-02
OSVCLSA-2022-1660758476 No score

Fixed 15 CVEs in expat

  • CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs
  • CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution
  • CVE-2022-25315: Fix integer overflow in storeRawNames()
  • CVE-2022-22822: Fix integer overflow in addBinding()
  • CVE-2022-22823: Fix integer overflow in build_model()
  • CVE-2022-22824: Fix integer overflow in defineAttribute()
  • CVE-2022-22825: Fix integer overflow in lookup()
  • CVE-2022-22826: Fix integer overflow in nextScaffoldPart()
  • CVE-2022-22827: Fix integer overflow in storeAtts()
  • CVE-2022-23852: Fix integer overflow in XML_GetBuffer()
  • CVE-2021-46143: Fix integer overflow on m_groupSize in doProlog()
  • CVE-2021-45960: Fix troublesome left shifts in storeAtts()
  • CVE-2022-23990: Fix integer overflow in doProlog()
  • CVE-2022-25313: Fix stack exhaustion in build_model()
  • CVE-2022-25314: Fix integer overflow in copyString()
Record
CLSA-2022-1660758476
Updated
2026-11-02
OSVCLSA-2022-1660759632 No score

Fixed 13 CVEs in expat

  • CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs
  • CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution
  • CVE-2022-25315: Fix integer overflow in storeRawNames()
  • CVE-2022-22822: Fix integer overflow in addBinding()
  • CVE-2022-22823: Fix integer overflow in build_model()
  • CVE-2022-22824: Fix integer overflow in defineAttribute()
  • CVE-2022-22825: Fix integer overflow in lookup()
  • CVE-2022-22826: Fix integer overflow in nextScaffoldPart()
  • CVE-2022-22827: Fix integer overflow in storeAtts()
  • CVE-2022-23852: Fix integer overflow in XML_GetBuffer()
  • CVE-2021-46143: Fix integer overflow on m_groupSize in doProlog()
  • CVE-2021-45960: Fix troublesome left shifts in storeAtts()
  • CVE-2022-23990: Fix integer overflow in doProlog()
Record
CLSA-2022-1660759632
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
expat
Alpine:v3.12
 before 2.2.10-r2
2.2.10-r2
expat
Alpine:v3.13
 before 2.2.10-r4
2.2.10-r4
expat
Alpine:v3.14
 before 2.4.5-r0
2.4.5-r0
expat
Alpine:v3.15
 before 2.4.5-r0
2.4.5-r0
expat
Alpine:v3.16
 before 2.4.5-r0
2.4.5-r0
expat
Alpine:v3.17
 before 2.4.5-r0
2.4.5-r0
expat
Alpine:v3.18
 before 2.4.5-r0
2.4.5-r0
expat
Alpine:v3.19
 before 2.4.5-r0
2.4.5-r0
expat
Alpine:v3.20
 before 2.4.5-r0
2.4.5-r0
expat
Alpine:v3.21
 before 2.4.5-r0
2.4.5-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
expat
Alpine:v3.22
 before 2.4.5-r0
2.4.5-r0
expat
Alpine:v3.23
 before 2.4.5-r0
2.4.5-r0
expat
Alpine:v3.24
 before 2.4.5-r0
2.4.5-r0
firefox
AlmaLinux:8
From an advisory covering 10 CVEs
 before 91.7.0-3.el8_5.alma
91.7.0-3.el8_5.alma
thunderbird
AlmaLinux:8
From an advisory covering 11 CVEs
 before 91.7.0-2.el8_5.alma
91.7.0-2.el8_5.alma
thunderbird
AlmaLinux:8
From an advisory covering 11 CVEs
 before 91.7.0-2.el8_5.alma.plus
91.7.0-2.el8_5.alma.plus
expat
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.2.5-8.el8_6.2
2.2.5-8.el8_6.2
expat-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.2.5-8.el8_6.2
2.2.5-8.el8_6.2
xmlrpc-c-c++
AlmaLinux:8
 before 1.51.0-5.el8_5.1
1.51.0-5.el8_5.1
xmlrpc-c-client++
AlmaLinux:8
 before 1.51.0-5.el8_5.1
1.51.0-5.el8_5.1
xmlrpc-c-devel
AlmaLinux:8
 before 1.51.0-5.el8_5.1
1.51.0-5.el8_5.1
mingw32-expat
AlmaLinux:8
From an advisory covering 6 CVEs
 before 2.4.8-1.el8
2.4.8-1.el8
mingw64-expat
AlmaLinux:8
From an advisory covering 6 CVEs
 before 2.4.8-1.el8
2.4.8-1.el8
ogdi
Azure Linux:2
 through 4.1.0-9 None known
ogdi
Azure Linux:3
 through 4.1.1-3 None known
expat
Azure Linux:2
 before 2.4.8-1
2.4.8-1
expat
TuxCare:CentOS:8.4
From an advisory covering 15 CVEs
 before 2.2.5-4.el8.tuxcare.els1
2.2.5-4.el8.tuxcare.els1
expat-devel
TuxCare:CentOS:8.4
From an advisory covering 15 CVEs
 before 2.2.5-4.el8.tuxcare.els1
2.2.5-4.el8.tuxcare.els1
expat-static
TuxCare:CentOS:8.4
From an advisory covering 15 CVEs
 before 2.2.5-4.el8.tuxcare.els1
2.2.5-4.el8.tuxcare.els1
expat
TuxCare:CentOS:8.5
From an advisory covering 15 CVEs
 before 2.2.5-4.el8.tuxcare.els1
2.2.5-4.el8.tuxcare.els1
expat-devel
TuxCare:CentOS:8.5
From an advisory covering 15 CVEs
 before 2.2.5-4.el8.tuxcare.els1
2.2.5-4.el8.tuxcare.els1
expat-static
TuxCare:CentOS:8.5
From an advisory covering 15 CVEs
 before 2.2.5-4.el8.tuxcare.els1
2.2.5-4.el8.tuxcare.els1
expat
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 2.0.1-13.el6_8.tuxcare.els1
2.0.1-13.el6_8.tuxcare.els1
expat-devel
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 2.0.1-13.el6_8.tuxcare.els1
2.0.1-13.el6_8.tuxcare.els1
expat
TuxCare:Ubuntu:16.04
From an advisory covering 14 CVEs
 before 2.1.0-7ubuntu0.16.04.5+tuxcare.els1
2.1.0-7ubuntu0.16.04.5+tuxcare.els1
libexpat1
TuxCare:Ubuntu:16.04
From an advisory covering 14 CVEs
 before 2.1.0-7ubuntu0.16.04.5+tuxcare.els1
2.1.0-7ubuntu0.16.04.5+tuxcare.els1
libexpat1-dev
TuxCare:Ubuntu:16.04
From an advisory covering 14 CVEs
 before 2.1.0-7ubuntu0.16.04.5+tuxcare.els1
2.1.0-7ubuntu0.16.04.5+tuxcare.els1
expat
TuxCare:CentOS:6
From an advisory covering 13 CVEs
 before 2.0.1-13.el6_8.tuxcare.els1
2.0.1-13.el6_8.tuxcare.els1
expat-devel
TuxCare:CentOS:6
From an advisory covering 13 CVEs
 before 2.0.1-13.el6_8.tuxcare.els1
2.0.1-13.el6_8.tuxcare.els1
expat
Debian:12
 before 2.4.5-1
2.4.5-1
expat
Debian:13
 before 2.4.5-1
2.4.5-1
expat
Debian:14
 before 2.4.5-1
2.4.5-1
libxmltok
Debian:12
 All versions, plus listed versions
1.2-41.2-4.11.2-4.1~exp11.2-4.2
 None known
expat
Debian:9
From an advisory covering 5 CVEs
 before 2.2.0-2+deb9u5, plus listed versions
2.2.0-22.2.0-2+deb9u12.2.0-2+deb9u22.2.0-2+deb9u32.2.0-2+deb9u4
2.2.0-2+deb9u5
expat
Debian:10
From an advisory covering 5 CVEs
 before 2.2.6-2+deb10u3, plus listed versions
2.2.6-22.2.6-2+deb10u12.2.6-2+deb10u2
2.2.6-2+deb10u3
expat
Debian:11
From an advisory covering 5 CVEs
 before 2.2.10-2+deb11u2, plus listed versions
2.2.10-22.2.10-2+deb11u1
2.2.10-2+deb11u2
Expat_jll
Julia
 before 2.4.8+0
2.4.8+0
expat
Mageia:8
From an advisory covering 5 CVEs
 before 2.2.10-1.3.mga8
2.2.10-1.3.mga8
firefox
Mageia:8
From an advisory covering 11 CVEs
 before 91.8.0-1.1.mga8
91.8.0-1.1.mga8
firefox-l10n
Mageia:8
From an advisory covering 11 CVEs
 before 91.8.0-1.mga8
91.8.0-1.mga8
nss
Mageia:8
From an advisory covering 11 CVEs
 before 3.77.0-1.mga8
3.77.0-1.mga8
rootcerts
Mageia:8
From an advisory covering 11 CVEs
 before 20220324.00-1.mga8
20220324.00-1.mga8
thunderbird
Mageia:8
From an advisory covering 12 CVEs
 before 91.8.1-1.1.mga8
91.8.1-1.1.mga8
thunderbird-l10n
Mageia:8
From an advisory covering 12 CVEs
 before 91.8.1-1.mga8
91.8.1-1.mga8
xmlrpc-c
Mageia:8
 before 1.51.06-1.1.mga8
1.51.06-1.1.mga8
expat
openEuler:20.03-LTS-SP1
From an advisory covering 5 CVEs
 before 2.2.9-6.oe1
2.2.9-6.oe1
expat
openEuler:20.03-LTS-SP2
From an advisory covering 5 CVEs
 before 2.2.9-6.oe1
2.2.9-6.oe1
expat
openEuler:20.03-LTS-SP3
From an advisory covering 5 CVEs
 before 2.2.9-6.oe1
2.2.9-6.oe1
firefox
openEuler:20.03-LTS-SP1
From an advisory covering 3 CVEs
 before 79.0-8.oe1
79.0-8.oe1
firefox
openEuler:20.03-LTS-SP2
From an advisory covering 3 CVEs
 before 79.0-8.oe1
79.0-8.oe1
firefox
openEuler:20.03-LTS-SP3
From an advisory covering 3 CVEs
 before 79.0-8.oe1
79.0-8.oe1
expat
openEuler:22.03-LTS
From an advisory covering 5 CVEs
 before 2.4.1-8.oe2203
2.4.1-8.oe2203
firefox
openEuler:22.03-LTS
From an advisory covering 3 CVEs
 before 79.0-13.oe2203
79.0-13.oe2203
mozjs78
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 78.4.0-9.oe2003sp4
78.4.0-9.oe2003sp4
expat-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:2.2.10-12.el9_0
0:2.2.10-12.el9_0
expat-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:2.2.10-12.el9_0
0:2.2.10-12.el9_0
expat-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:2.2.10-12.el9_0
0:2.2.10-12.el9_0
expat
Red Hat:enterprise_linux:9::baseos
From an advisory covering 11 CVEs
 before 0:2.2.10-12.el9_0
0:2.2.10-12.el9_0
expat-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 11 CVEs
 before 0:2.2.10-12.el9_0
0:2.2.10-12.el9_0
expat-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 11 CVEs
 before 0:2.2.10-12.el9_0
0:2.2.10-12.el9_0
firefox
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 10 CVEs
 before 0:91.7.0-3.el8_1
0:91.7.0-3.el8_1
firefox-debuginfo
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 10 CVEs
 before 0:91.7.0-3.el8_1
0:91.7.0-3.el8_1
firefox-debugsource
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 10 CVEs
 before 0:91.7.0-3.el8_1
0:91.7.0-3.el8_1
firefox
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 10 CVEs
 before 0:91.7.0-3.el8_2
0:91.7.0-3.el8_2
firefox-debuginfo
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 10 CVEs
 before 0:91.7.0-3.el8_2
0:91.7.0-3.el8_2
firefox-debugsource
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 10 CVEs
 before 0:91.7.0-3.el8_2
0:91.7.0-3.el8_2
firefox
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 10 CVEs
 before 0:91.7.0-3.el8_4
0:91.7.0-3.el8_4
firefox-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 10 CVEs
 before 0:91.7.0-3.el8_4
0:91.7.0-3.el8_4
firefox-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 10 CVEs
 before 0:91.7.0-3.el8_4
0:91.7.0-3.el8_4
firefox
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:91.7.0-3.el8_5
0:91.7.0-3.el8_5
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:91.7.0-3.el8_5
0:91.7.0-3.el8_5
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:91.7.0-3.el8_5
0:91.7.0-3.el8_5
firefox
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
 before 0:91.7.0-3.el7_9
0:91.7.0-3.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 13 CVEs
 before 0:91.7.0-3.el7_9
0:91.7.0-3.el7_9
firefox
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
 before 0:91.7.0-3.el7_9
0:91.7.0-3.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 13 CVEs
 before 0:91.7.0-3.el7_9
0:91.7.0-3.el7_9
firefox
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
 before 0:91.7.0-3.el7_9
0:91.7.0-3.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 13 CVEs
 before 0:91.7.0-3.el7_9
0:91.7.0-3.el7_9
thunderbird
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 11 CVEs
 before 0:91.7.0-2.el8_2
0:91.7.0-2.el8_2
thunderbird-debuginfo
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 11 CVEs
 before 0:91.7.0-2.el8_2
0:91.7.0-2.el8_2
thunderbird-debugsource
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 11 CVEs
 before 0:91.7.0-2.el8_2
0:91.7.0-2.el8_2
thunderbird
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 0:91.7.0-2.el8_5
0:91.7.0-2.el8_5
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 0:91.7.0-2.el8_5
0:91.7.0-2.el8_5
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 0:91.7.0-2.el8_5
0:91.7.0-2.el8_5
thunderbird
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 11 CVEs
 before 0:91.7.0-2.el8_1
0:91.7.0-2.el8_1
thunderbird-debuginfo
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 11 CVEs
 before 0:91.7.0-2.el8_1
0:91.7.0-2.el8_1
thunderbird-debugsource
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 11 CVEs
 before 0:91.7.0-2.el8_1
0:91.7.0-2.el8_1
thunderbird
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 0:91.7.0-2.el7_9
0:91.7.0-2.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 0:91.7.0-2.el7_9
0:91.7.0-2.el7_9
thunderbird
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 0:91.7.0-2.el7_9
0:91.7.0-2.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 0:91.7.0-2.el7_9
0:91.7.0-2.el7_9
thunderbird
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 0:91.7.0-2.el7_9
0:91.7.0-2.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 0:91.7.0-2.el7_9
0:91.7.0-2.el7_9
thunderbird
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 11 CVEs
 before 0:91.7.0-2.el8_4
0:91.7.0-2.el8_4
thunderbird-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 11 CVEs
 before 0:91.7.0-2.el8_4
0:91.7.0-2.el8_4
thunderbird-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 11 CVEs
 before 0:91.7.0-2.el8_4
0:91.7.0-2.el8_4
expat
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.2.5-4.el8_5.3
0:2.2.5-4.el8_5.3
expat-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.2.5-4.el8_5.3
0:2.2.5-4.el8_5.3
expat-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.2.5-4.el8_5.3
0:2.2.5-4.el8_5.3
expat-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.2.5-4.el8_5.3
0:2.2.5-4.el8_5.3
expat
Red Hat:rhel_eus:8.4::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-4.el8_4.2
0:2.2.5-4.el8_4.2
expat-debuginfo
Red Hat:rhel_eus:8.4::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-4.el8_4.2
0:2.2.5-4.el8_4.2
expat-debugsource
Red Hat:rhel_eus:8.4::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-4.el8_4.2
0:2.2.5-4.el8_4.2
expat-devel
Red Hat:rhel_eus:8.4::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-4.el8_4.2
0:2.2.5-4.el8_4.2
redhat-virtualization-host
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 3 CVEs
 before 0:4.4.10-202203211649_8.5
0:4.4.10-202203211649_8.5
redhat-virtualization-host-image-update
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 3 CVEs
 before 0:4.4.10-202203211649_8.5
0:4.4.10-202203211649_8.5
expat
Red Hat:rhel_e4s:8.1::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-3.el8_1.1
0:2.2.5-3.el8_1.1
expat-debuginfo
Red Hat:rhel_e4s:8.1::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-3.el8_1.1
0:2.2.5-3.el8_1.1
expat-debugsource
Red Hat:rhel_e4s:8.1::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-3.el8_1.1
0:2.2.5-3.el8_1.1
expat-devel
Red Hat:rhel_e4s:8.1::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-3.el8_1.1
0:2.2.5-3.el8_1.1
expat
Red Hat:enterprise_linux:7::client
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-static
Red Hat:enterprise_linux:7::client
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-static
Red Hat:enterprise_linux:7::computenode
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-static
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat
Red Hat:enterprise_linux:7::workstation
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat-static
Red Hat:enterprise_linux:7::workstation
From an advisory covering 12 CVEs
 before 0:2.1.0-14.el7_9
0:2.1.0-14.el7_9
expat
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-3.el8_2.2
0:2.2.5-3.el8_2.2
expat-debuginfo
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-3.el8_2.2
0:2.2.5-3.el8_2.2
expat-debugsource
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-3.el8_2.2
0:2.2.5-3.el8_2.2
expat-devel
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 3 CVEs
 before 0:2.2.5-3.el8_2.2
0:2.2.5-3.el8_2.2
redhat-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 12 CVEs
 before 0:4.3.22-20220330.1.el7_9
0:4.3.22-20220330.1.el7_9
redhat-virtualization-host-image-update
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 12 CVEs
 before 0:4.3.22-20220330.1.el7_9
0:4.3.22-20220330.1.el7_9
expat
Red Hat:rhel_els:6
From an advisory covering 3 CVEs
 before 0:2.0.1-14.el6_10
0:2.0.1-14.el6_10
expat-debuginfo
Red Hat:rhel_els:6
From an advisory covering 3 CVEs
 before 0:2.0.1-14.el6_10
0:2.0.1-14.el6_10
expat-devel
Red Hat:rhel_els:6
From an advisory covering 3 CVEs
 before 0:2.0.1-14.el6_10
0:2.0.1-14.el6_10
xmlrpc-c
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.51.0-5.el8_1.1
0:1.51.0-5.el8_1.1
xmlrpc-c-apps-debuginfo
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.51.0-5.el8_1.1
0:1.51.0-5.el8_1.1
xmlrpc-c-c++-debuginfo
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.51.0-5.el8_1.1
0:1.51.0-5.el8_1.1
xmlrpc-c-client++-debuginfo
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.51.0-5.el8_1.1
0:1.51.0-5.el8_1.1
xmlrpc-c-client
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.51.0-5.el8_1.1
0:1.51.0-5.el8_1.1
xmlrpc-c-client-debuginfo
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.51.0-5.el8_1.1
0:1.51.0-5.el8_1.1
xmlrpc-c-debuginfo
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.51.0-5.el8_1.1
0:1.51.0-5.el8_1.1
xmlrpc-c-debugsource
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.51.0-5.el8_1.1
0:1.51.0-5.el8_1.1
xmlrpc-c
Red Hat:rhel_eus:8.2::baseos
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-apps-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-c++-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-client++-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-client
Red Hat:rhel_eus:8.2::baseos
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-client-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-debugsource
Red Hat:rhel_eus:8.2::baseos
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-apps-debuginfo
Red Hat:rhel_eus:8.2::crb
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-c++
Red Hat:rhel_eus:8.2::crb
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-c++-debuginfo
Red Hat:rhel_eus:8.2::crb
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-client++
Red Hat:rhel_eus:8.2::crb
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-client++-debuginfo
Red Hat:rhel_eus:8.2::crb
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-client-debuginfo
Red Hat:rhel_eus:8.2::crb
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-debuginfo
Red Hat:rhel_eus:8.2::crb
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-debugsource
Red Hat:rhel_eus:8.2::crb
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c-devel
Red Hat:rhel_eus:8.2::crb
 before 0:1.51.0-5.el8_2.1
0:1.51.0-5.el8_2.1
xmlrpc-c
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-apps-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-c++-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-client++-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-client
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-client-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-apps-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-c++
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-c++-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-client++
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-client++-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-client-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c-devel
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
xmlrpc-c
Red Hat:rhel_eus:8.4::baseos
 before 0:1.51.0-5.el8_4.1
0:1.51.0-5.el8_4.1
xmlrpc-c-apps-debuginfo
Red Hat:rhel_eus:8.4::baseos
 before 0:1.51.0-5.el8_4.1
0:1.51.0-5.el8_4.1
xmlrpc-c-c++-debuginfo
Red Hat:rhel_eus:8.4::baseos
 before 0:1.51.0-5.el8_4.1
0:1.51.0-5.el8_4.1
xmlrpc-c-client++-debuginfo
Red Hat:rhel_eus:8.4::baseos
 before 0:1.51.0-5.el8_4.1
0:1.51.0-5.el8_4.1
xmlrpc-c-client
Red Hat:rhel_eus:8.4::baseos
 before 0:1.51.0-5.el8_4.1
0:1.51.0-5.el8_4.1
xmlrpc-c-client-debuginfo
Red Hat:rhel_eus:8.4::baseos
 before 0:1.51.0-5.el8_4.1
0:1.51.0-5.el8_4.1
firefox
Rocky Linux:8
From an advisory covering 10 CVEs
 before 0:91.7.0-3.el8_5
0:91.7.0-3.el8_5
thunderbird
Rocky Linux:8
From an advisory covering 11 CVEs
 before 0:91.7.0-2.el8_5
0:91.7.0-2.el8_5
expat
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.2.5-4.el8_5.3
0:2.2.5-4.el8_5.3
xmlrpc-c
Rocky Linux:8
 before 0:1.51.0-5.el8_5.1
0:1.51.0-5.el8_5.1
expat
SUSE:HPE Helion OpenStack 8
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:OpenStack Cloud 8
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:OpenStack Cloud 9
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 5 CVEs
 before 2.1.0-21.18.1
2.1.0-21.18.1
expat
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Real Time 15 SP2
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Manager Proxy 4.1
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Manager Server 4.1
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Micro 5.0
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Enterprise Storage 6
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Enterprise Storage 7
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 5 CVEs
 before 2.0.1-88.42.18.1
2.0.1-88.42.18.1
expat
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 5 CVEs
 before 2.0.1-88.42.18.1
2.0.1-88.42.18.1
expat
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 5 CVEs
 before 2.4.4-150400.3.6.9
2.4.4-150400.3.6.9
expat
openSUSE:Leap 15.4
From an advisory covering 5 CVEs
 before 2.4.4-150400.3.6.9
2.4.4-150400.3.6.9
expat
Ubuntu:Pro:14.04:LTS
 before 2.1.0-4ubuntu1.4+esm4, plus listed versions
2.1.0-42.1.0-4ubuntu12.1.0-4ubuntu1.12.1.0-4ubuntu1.22.1.0-4ubuntu1.32.1.0-4ubuntu1.42.1.0-4ubuntu1.4+esm12.1.0-4ubuntu1.4+esm2
2.1.0-4ubuntu1.4+esm4
coin3
Ubuntu:Pro:14.04:LTS
 before 3.1.4~abc9f50-4ubuntu2+esm2, plus listed versions
3.1.4~abc9f50-33.1.4~abc9f50-43.1.4~abc9f50-4ubuntu23.1.4~abc9f50-4ubuntu2+esm1
3.1.4~abc9f50-4ubuntu2+esm2
xmlrpc-c
Ubuntu:Pro:14.04:LTS
 before 1.33.06-0ubuntu1+esm1, plus listed versions
1.16.33-3.2ubuntu31.33.06-0ubuntu1
1.33.06-0ubuntu1+esm1
expat
Ubuntu:Pro:16.04:LTS
 before 2.1.0-7ubuntu0.16.04.5+esm2, plus listed versions
2.1.0-72.1.0-7ubuntu0.16.04.12.1.0-7ubuntu0.16.04.22.1.0-7ubuntu0.16.04.32.1.0-7ubuntu0.16.04.42.1.0-7ubuntu0.16.04.5
2.1.0-7ubuntu0.16.04.5+esm2
coin3
Ubuntu:Pro:16.04:LTS
 before 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2, plus listed versions
3.1.4~abc9f50+dfsg1-13.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1
3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2
insighttoolkit
Ubuntu:Pro:16.04:LTS
 before 3.20.1+git20120521-6ubuntu0.1~esm1, plus listed versions
3.20.1+git20120521-63.20.1+git20120521-6build1
3.20.1+git20120521-6ubuntu0.1~esm1
libxmltok
Ubuntu:Pro:16.04:LTS
 before 1.2-3ubuntu0.16.04.1~esm2, plus listed versions
1.2-3build31.2-3ubuntu0.16.04.1~esm1
1.2-3ubuntu0.16.04.1~esm2
swish-e
Ubuntu:Pro:16.04:LTS
 before 2.4.7-4ubuntu0.1~esm1, plus listed versions
2.4.7-42.4.7-4build1
2.4.7-4ubuntu0.1~esm1
ayttm
Ubuntu:Pro:16.04:LTS
 before 0.6.3-3ubuntu0.1~esm1, plus listed versions
0.6.3-3build1
0.6.3-3ubuntu0.1~esm1
cableswig
Ubuntu:Pro:16.04:LTS
 before 0.1.0+git20150808-2ubuntu0.1~esm1, plus listed versions
0.1.0+git20150808-10.1.0+git20150808-2
0.1.0+git20150808-2ubuntu0.1~esm1
insighttoolkit4
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.1-1ubuntu34.8.1-1ubuntu44.8.2-3.1ubuntu14.9.0-3ubuntu24.9.0-4ubuntu14.9.0-4ubuntu1.1
 None known
matanza
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.13+ds1-5
 None known
xmlrpc-c
Ubuntu:Pro:16.04:LTS
 before 1.33.14-1ubuntu1+esm1, plus listed versions
1.33.14-0.2ubuntu31.33.14-1ubuntu1
1.33.14-1ubuntu1+esm1
expat
Ubuntu:18.04:LTS
 before 2.2.5-3ubuntu0.4, plus listed versions
2.2.3-12.2.3-22.2.5-0ubuntu22.2.5-32.2.5-3ubuntu0.12.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
coin3
Ubuntu:Pro:18.04:LTS
 before 3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1, plus listed versions
3.1.4~abc9f50+dfsg1-23.1.4~abc9f50+dfsg2-13.1.4~abc9f50+dfsg3-13.1.4~abc9f50+dfsg3-2
3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1
libxmltok
Ubuntu:Pro:18.04:LTS
 before 1.2-4ubuntu0.18.04.1~esm1, plus listed versions
1.2-4
1.2-4ubuntu0.18.04.1~esm1
matanza
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.13+ds1-5build10.13+ds1-6
 None known
swish-e
Ubuntu:Pro:18.04:LTS
 before 2.4.7-5ubuntu1+esm1, plus listed versions
2.4.7-5ubuntu1
2.4.7-5ubuntu1+esm1
xmlrpc-c
Ubuntu:Pro:18.04:LTS
 before 1.33.14-8ubuntu0.18.04.1~esm1, plus listed versions
1.33.14-71.33.14-81.33.14-8build1
1.33.14-8ubuntu0.18.04.1~esm1
expat
Ubuntu:20.04:LTS
 before 2.2.9-1ubuntu0.2, plus listed versions
2.2.7-22.2.9-12.2.9-1build1
2.2.9-1ubuntu0.2
libxmltok
Ubuntu:Pro:20.04:LTS
 before 1.2-4ubuntu0.20.04.1~esm1, plus listed versions
1.2-4
1.2-4ubuntu0.20.04.1~esm1
matanza
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.13+ds1-60.13+ds2-1
 None known
swish-e
Ubuntu:Pro:20.04:LTS
 before 2.4.7-6ubuntu0.1~esm1, plus listed versions
2.4.7-6build12.4.7-6build2
2.4.7-6ubuntu0.1~esm1
wbxml2
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.10.7-1build1
 None known
xmlrpc-c
Ubuntu:Pro:20.04:LTS
 before 1.33.14-8ubuntu0.20.04.1~esm1, plus listed versions
1.33.14-8build11.33.14-8build2
1.33.14-8ubuntu0.20.04.1~esm1
firefox
Ubuntu:22.04:LTS
 before 1:1snap1-0ubuntu1, plus listed versions
93.0+build1-0ubuntu394.0+build3-0ubuntu194.0.2+build1-0ubuntu194.0.2+build2-0ubuntu195.0+build1-0ubuntu1
Show 9 moreShow less
95.0.1+build2-0ubuntu195.0.2+build1-0ubuntu196.0+build2-0ubuntu196.0.1+build1-0ubuntu196.0.2+build1-0ubuntu196.0.3+build1-0ubuntu197.0+build1-0ubuntu197.0+build2-0ubuntu197.0.1+build1-0ubuntu1
1:1snap1-0ubuntu1
matanza
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.13+ds2-1
 None known
thunderbird
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 34 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.11:115.3.1+build1-0ubuntu0.22.04.21:115.4.1+build1-0ubuntu0.22.04.11:115.5.0+build1-0ubuntu0.22.04.11:115.6.0+build2-0ubuntu0.22.04.11:115.8.1+build1-0ubuntu0.22.04.11:115.9.0+build1-0ubuntu0.22.04.11:115.10.1+build1-0ubuntu0.22.04.11:115.11.0+build2-0ubuntu0.22.04.11:115.12.0+build3-0ubuntu0.22.04.11:115.13.0+build5-0ubuntu0.22.04.11:115.15.0+build1-0ubuntu0.22.04.11:115.16.0+build2-0ubuntu0.22.04.11:115.18.0+build1-0ubuntu0.22.04.11:128.12.0+build1-0ubuntu0.22.04.11:140.7.1+build1-0ubuntu0.22.04.1
 None known
libxmltok
Ubuntu:Pro:22.04:LTS
 before 1.2-4ubuntu0.22.04.1~esm1, plus listed versions
1.2-4
1.2-4ubuntu0.22.04.1~esm1
swish-e
Ubuntu:Pro:22.04:LTS
 before 2.4.7-6.1ubuntu0.1~esm1, plus listed versions
2.4.7-6build32.4.7-6.12.4.7-6.1build1
2.4.7-6.1ubuntu0.1~esm1
xmlrpc-c
Ubuntu:Pro:22.04:LTS
 before 1.33.14-10ubuntu0.1~esm1, plus listed versions
1.33.14-91.33.14-10
1.33.14-10ubuntu0.1~esm1
libxmltok
Ubuntu:24.04:LTS
 before 1.2-4.1ubuntu1, plus listed versions
1.2-4ubuntu1
1.2-4.1ubuntu1
matanza
Ubuntu:24.04:LTS
 All versions, plus listed versions
0.13+ds2-10.13+ds2-1build10.13+ds2-1build2
 None known
thunderbird
Ubuntu:24.04:LTS
 All versions, plus listed versions
1:115.3.1+build1-0ubuntu11:115.4.1+build1-0ubuntu11:115.4.3+build1-0ubuntu11:115.5.0+build1-0ubuntu11:115.5.1+build1-0ubuntu1
Show 9 moreShow less
1:115.5.2+build2-0ubuntu11:115.6.0+build1-0ubuntu11:115.6.0+build2-0ubuntu11:115.6.1+build1-0ubuntu11:115.8.0+build1-0ubuntu11:115.8.1+build1+snap21:115.8.1+build1+snap32:1snap1-0ubuntu12:1snap1-0ubuntu3
 None known
swish-e
Ubuntu:Pro:24.04:LTS
 before 2.4.7-6.2ubuntu0.1~esm1, plus listed versions
2.4.7-6.22.4.7-6.2build12.4.7-6.2build22.4.7-6.2build3
2.4.7-6.2ubuntu0.1~esm1
xmlrpc-c
Ubuntu:Pro:24.04:LTS
 before 1.33.14-12ubuntu0.1~esm1, plus listed versions
1.33.14-111.33.14-11.11.33.14-121.33.14-12build11.33.14-12build2
1.33.14-12ubuntu0.1~esm1
matanza
Ubuntu:25.10
 All versions, plus listed versions
0.13+ds2-2
 None known
swish-e
Ubuntu:25.10
 All versions, plus listed versions
2.4.7-6.32.4.7-6.3build12.4.7-7
 None known
thunderbird
Ubuntu:25.10
 All versions, plus listed versions
2:1snap1-0ubuntu3
 None known
matanza
Ubuntu:26.10
 All versions, plus listed versions
0.13+ds2-2build1
 None known
swish-e
Ubuntu:26.10
 All versions, plus listed versions
2.4.7-7.12.4.7-7.22.4.7-7.2build1
 None known
thunderbird
Ubuntu:26.10
 All versions, plus listed versions
2:1snap1-0ubuntu5
 None known
matanza
Ubuntu:26.04:LTS
 All versions, plus listed versions
0.13+ds2-20.13+ds2-2build1
 None known
thunderbird
Ubuntu:26.04:LTS
 All versions, plus listed versions
2:1snap1-0ubuntu32:1snap1-0ubuntu42:1snap1-0ubuntu5
 None known
swish-e
Ubuntu:Pro:26.04:LTS
 before 2.4.7-7.1ubuntu0.1~esm1, plus listed versions
2.4.7-72.4.7-7.1
2.4.7-7.1ubuntu0.1~esm1
expat
Ubuntu:Pro:14.04:LTS
From an advisory covering 12 CVEs
 before 2.1.0-4ubuntu1.4+esm4, plus listed versions
2.1.0-42.1.0-4ubuntu12.1.0-4ubuntu1.12.1.0-4ubuntu1.22.1.0-4ubuntu1.32.1.0-4ubuntu1.42.1.0-4ubuntu1.4+esm12.1.0-4ubuntu1.4+esm2
2.1.0-4ubuntu1.4+esm4
expat
Ubuntu:Pro:16.04:LTS
From an advisory covering 12 CVEs
 before 2.1.0-7ubuntu0.16.04.5+esm2, plus listed versions
2.1.0-72.1.0-7ubuntu0.16.04.12.1.0-7ubuntu0.16.04.22.1.0-7ubuntu0.16.04.32.1.0-7ubuntu0.16.04.42.1.0-7ubuntu0.16.04.5
2.1.0-7ubuntu0.16.04.5+esm2
expat
Ubuntu:18.04:LTS
From an advisory covering 12 CVEs
 before 2.2.5-3ubuntu0.4, plus listed versions
2.2.3-12.2.3-22.2.5-0ubuntu22.2.5-32.2.5-3ubuntu0.12.2.5-3ubuntu0.2
2.2.5-3ubuntu0.4
expat
Ubuntu:20.04:LTS
From an advisory covering 12 CVEs
 before 2.2.9-1ubuntu0.2, plus listed versions
2.2.7-22.2.9-12.2.9-1build1
2.2.9-1ubuntu0.2
libxmltok
Ubuntu:Pro:16.04:LTS
From an advisory covering 15 CVEs
 before 1.2-3ubuntu0.16.04.1~esm2, plus listed versions
1.2-3build31.2-3ubuntu0.16.04.1~esm1
1.2-3ubuntu0.16.04.1~esm2
libxmltok
Ubuntu:Pro:18.04:LTS
From an advisory covering 15 CVEs
 before 1.2-4ubuntu0.18.04.1~esm1, plus listed versions
1.2-4
1.2-4ubuntu0.18.04.1~esm1
libxmltok
Ubuntu:Pro:20.04:LTS
From an advisory covering 15 CVEs
 before 1.2-4ubuntu0.20.04.1~esm1, plus listed versions
1.2-4
1.2-4ubuntu0.20.04.1~esm1
libxmltok
Ubuntu:Pro:22.04:LTS
From an advisory covering 15 CVEs
 before 1.2-4ubuntu0.22.04.1~esm1, plus listed versions
1.2-4
1.2-4ubuntu0.22.04.1~esm1
xmlrpc-c
Ubuntu:Pro:14.04:LTS
From an advisory covering 2 CVEs
 before 1.33.06-0ubuntu1+esm1, plus listed versions
1.16.33-3.2ubuntu31.33.06-0ubuntu1
1.33.06-0ubuntu1+esm1
xmlrpc-c
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 1.33.14-1ubuntu1+esm1, plus listed versions
1.33.14-0.2ubuntu31.33.14-1ubuntu1
1.33.14-1ubuntu1+esm1
xmlrpc-c
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 1.33.14-8ubuntu0.18.04.1~esm1, plus listed versions
1.33.14-71.33.14-81.33.14-8build1
1.33.14-8ubuntu0.18.04.1~esm1
xmlrpc-c
Ubuntu:Pro:20.04:LTS
From an advisory covering 2 CVEs
 before 1.33.14-8ubuntu0.20.04.1~esm1, plus listed versions
1.33.14-8build11.33.14-8build2
1.33.14-8ubuntu0.20.04.1~esm1
xmlrpc-c
Ubuntu:Pro:22.04:LTS
From an advisory covering 2 CVEs
 before 1.33.14-10ubuntu0.1~esm1, plus listed versions
1.33.14-91.33.14-10
1.33.14-10ubuntu0.1~esm1
xmlrpc-c
Ubuntu:Pro:24.04:LTS
From an advisory covering 2 CVEs
 before 1.33.14-12ubuntu0.1~esm1, plus listed versions
1.33.14-111.33.14-11.11.33.14-121.33.14-12build11.33.14-12build2
1.33.14-12ubuntu0.1~esm1
ayttm
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 0.6.3-3ubuntu0.1~esm1, plus listed versions
0.6.3-3build1
0.6.3-3ubuntu0.1~esm1
cableswig
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 0.1.0+git20150808-2ubuntu0.1~esm1, plus listed versions
0.1.0+git20150808-10.1.0+git20150808-2
0.1.0+git20150808-2ubuntu0.1~esm1
expat
openSUSE:Leap 15.3
From an advisory covering 5 CVEs
 before 2.2.5-3.15.1
2.2.5-3.15.1
expat
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 2.4.6-1.1
2.4.6-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubSatheesh575555/external_expat_AOSP10_r33_CVE-2022-252352022-05-24
PoC in GitHubfedericonbaez/cortex9-expat-utf8-name-validation-model2026-11-06

History

History
RecordedChangedSources
exploitsPoC in GitHub
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-25235 is a critical vulnerability (CVSS 9.8) in Libexpat Project Libexpat, published February 15, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.96%, the 92nd percentile. Fixed in expat 2.2.10-r2.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 16 package rows and 121 references. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 22 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open