libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.

🗓️ 17 Mar 2026 08:01:28Reported by MicrosoftType

CVE-2026-32778 is a Microsoft security vulnerability.

Reporter	Title	Published	Views	Family All 99
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Python affect AIX	15 Apr 202622:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2026-32776, CVE-2026-32777, CVE-2026-32778]	15 Apr 202605:32	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server	10 Apr 202614:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server affect IBM Business Automation Workflow (CVE-2026-32776, CVE-2026-32777, CVE-2026-32778)	8 Apr 202620:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to libexpat (CVE-2026-32776, CVE-2026-32777, CVE-2026-32778)	1 Apr 202618:08	–	ibm
ATTACKERKB	CVE-2026-32778	16 Mar 202607:02	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : firefox (ALAS2023-2026-1518)	1 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : thunderbird, --advisory ALAS2-2026-3219 (ALAS-2026-3219)	1 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2026-055 (ALASFIREFOX-2026-055)	1 Apr 202600:00	–	nessus
Tenable Nessus	Nessus Network Monitor < 6.5.4 Multiple Vulnerabilities (TNS-2026-14)	15 May 202600:00	–	nessus