CyberSecBulletin

Lexbor vulnerabilities

We track 2 vulnerabilities in Lexbor products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 13, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Lexbor vulnerabilities

  • 7.5 High severity

    lexbor: Access of Resource Using Incompatible Type

    CVE-2026-29079Lexbor

    Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a comment is created using the “unknown element” constructor. The comment’s data are written into the element’s fie

  • 7.5 High severity

    lexbor: Integer Underflow (Wrap or Wraparound)

    CVE-2026-29078Lexbor

    Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx->buffer_used -= size with a stale size = 3 causes an integer underflow that wraps to SIZE