Read the docs

michaelrsweet

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

michaelrsweet records in CISA KEV

No michaelrsweet vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-76283 CVE-2026-112094 · GHSA-2m37-39hv-427w

Use after free in michaelrsweet mxml mxml_load_data

Priority MEDIUM 56

A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0018 Published 2026-10-19 No fix listed CWE-119
TI-2026-74098 CVE-2026-110604 · GHSA-pc2v-ppxx-vfq5

Off-by-one stack out-of-bounds write in Mini-XML mxml_strtod()

Priority MEDIUM 44

Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal point is not '.'.

CVSS 4.0LOW 2.0 Local No auth User interaction EPSS 0.00217 Published 2026-10-14 No fix listed CWE-193
TI-2026-53919 CVE-2026-77220 · GHSA-2fr4-jfvm-chmp

PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting

Priority LOW 32

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00421 Published 2026-08-21 Fixed in 1.6.5 CWE-825
Open these records in search →