VulnSocial

CVE-2026-93990

LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

Back to dashboard
0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-09-20: 209-20
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew

    CVE-2026-93990 Expat through 2.8.4 fails to validate low surrogates following high surrogates in UTF-16 input, allowing malformed UTF-16 sequences to be accepted. Attackers can craf… https://www.cve.org/CVERecord?id=CVE-2026-93990

    00000497
    58.1K followersView on X
  • Severity Daily@severitydaily

    Expat's new UTF-16 flaw is fixed on master and in no release, so every version you can install is affected. VulnCheck (@VulnCheckAI) scores it 8.7. No exploitation reported. https://severitydaily.com/expat-cve-2026-93990-utf16-surrogate-8-7-no-released-fix-master-only/

    0000033
    24 followersView on X

Explore more

Back to dashboard