libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16
? CVE-2026-124317 · score 4.8/10
What could go wrong?
Microsoft fixed a security weakness. Details are limited to avoid helping attackers.
How urgent is it?
Check Microsoft’s page for details.
Who is affected?
azl3 expat 2.9.0-1 on Azure Linux 3.0, azl3 cmake 3.30.3-15 on Azure Linux 3.0, azl3 python3 3.12.16-1 on Azure Linux 3.0
What should I do?
Install this month’s updates via Windows Update, Intune or your update tool, then restart.
Known problems
Microsoft lists known issues per update: no KB article listed. Official page.