Comparison Overview
Expedia

Expedia
N/A
Last Update: 17/09/2026
Expedia is one of the world's leading full-service travel brands, helping travelers get the most out of every trip they take by making the travel process seamless. With Expedia, travelers can plan and book flights, hotels, vacation packages, and car rentals in one compl...

Hertz
8501 Williams Road, Estero, 33928, US
Last Update: 19/09/2026
Hertz Global Holdings, Inc. is one of the world’s leading car rental and mobility solutions providers. Its subsidiaries, including The Hertz Corporation, and licensees operate the Hertz, Dollar, Thrifty, and Firefly vehicle rental brands, with more than 11,000 rental lo...
Compliance Ranges Comparison

Expedia







Hertz






Benchmark & Cyber Underwriting Signals
Incidents vs Travel Arrangements Industry Avg (This Year)
No incidents recorded for Expedia in 2026.
Incidents vs Travel Arrangements Industry Avg (This Year)
No incidents recorded for Hertz in 2026.
Incident History - Expedia (X = Date, Y = Severity)
Expedia cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Hertz (X = Date, Y = Severity)
Hertz cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Expedia

Hertz
FAQ
Latest Global CVEs
An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options
Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3.
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.