CVE-2026-32777
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
CVSS
4.0
Medio
EPSS
0.2%
p12
KEV
—
Exploit Today
4
0-100
Publicado: 16 mar 2026 · Última mod.: 14 jul 2026 · CWE-835
0.2%EPSS · 30 días0.2%
2026-06-302026-07-17
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
- github.comhttps://github.com/libexpat/libexpat/issues/1161
- github.comhttps://github.com/libexpat/libexpat/pull/1159
- github.comhttps://github.com/libexpat/libexpat/pull/1162
- issues.oss-fuzz.comhttps://issues.oss-fuzz.com/issues/486993411
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-48907.5 ALT93.6%
——28A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.4dCVE-2026-428997.5 ALT82.4%
——25Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.4dCVE-2026-331167.5 ALT80.0%
——24Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.4dCVE-2026-465227.5 ALT76.7%
——23ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, due to a missing check in the MIFF decoder, a crafted file could cause an infinite loop resulting in CPU exhaustion. Versions 7.1.2.23 and 6.9.13-48 fix the issue.4dCVE-2023-301887.5 ALT73.3%
——22Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via crafted JavaScript file.10dCVE-2022-233527.5 ALT72.6%
——22An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).10d