Known Vulnerabilities for Expression Web by Microsoft
Listed below are 8 of the newest known vulnerabilities associated with "Expression Web" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-71498 json | node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, passing a Buffer whose final bytes fo... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-71430 json | node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.25.1, the WrappedRE2::Replace function buil... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-71286 json | The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its `templateStri... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-71285 json | Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo `site... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-71190 json | In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastro... | Not Provided | 2026-08-05 | 2026-08-06 |
| CVE-2026-70628 json | FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle pa... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-69207 json | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.34, the built-in CORS mid... | Not Provided | 2026-08-07 | 2026-08-07 |
| CVE-2026-69075 json | FlowIntel is affected by a stored cross-site scripting vulnerability through multiple user-controlled or administrator-contro... | Not Provided | 2026-08-03 | 2026-08-03 |
| CVE-2026-68749 json | Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthentica... | Not Provided | 2026-08-06 | 2026-08-06 |
| CVE-2026-68499 json | re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match imple... | Not Provided | 2026-07-30 | 2026-07-31 |