Known vulnerabilities in Libxml2

Software: Libxml2
Software CPE: cpe:2.3:a:gnome:libxml2:*:*:*:*:*:*:*:*
Total vulnerabilities: 83
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Libxml2 Libxml2 is affected by 83 known vulnerabilities: 24 high, 46 medium, 13 low Critical High Medium Low

Vulnerabilities (83)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147361 - Integer overflow
CVE-2026-86143
CWE-190 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147362 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-86144
CWE-611 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147357 - Integer overflow
CVE-2026-86139
CWE-190 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147358 - Stack-based buffer overflow
CVE-2026-86140
CWE-121 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147359 - NULL Pointer Dereference
CVE-2026-86141
CWE-476 Low
No
No
2.15.4 08.09.2026 SB2026090826
#VU147360 - Heap-based Buffer Overflow
CVE-2026-86142
CWE-122 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147355 - Out-of-bounds read
CVE-2026-86137
CWE-125 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147356 - Heap-based Buffer Overflow
CVE-2026-86138
CWE-122 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU128468 - Type confusion
CVE-2026-6732
CWE-843 Medium
No
No
2.15.3 29.04.2026 SB2026042979
#VU123115 - Missing release of memory after effective lifetime
CVE-2026-1757
CWE-401 Low
No
No
- 20.02.2026 SB2026022038
SB2026022043
SB2026022044
and 5 more
#VU122089 - Resource exhaustion
CVE-2026-0992
CWE-400 Medium
No
No
- 27.01.2026 SB2026012787
SB2026012788
SB2026022043
and 7 more
#VU122088 - Uncontrolled Recursion
CVE-2026-0990
CWE-674 Medium
No
No
- 27.01.2026 SB2026012787
SB2026012788
SB2026022043
and 7 more
#VU122087 - Uncontrolled Recursion
CVE-2026-0989
CWE-674 Medium
No
No
- 27.01.2026 SB2026012787
SB2026012788
SB2026012963
and 9 more
#VU118345 - Use After Free
CVE-2025-12863
CWE-416 Medium
No
No
- 12.11.2025 SB2025111207
#VU117630 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8732
CWE-835 Low
No
No
- 24.10.2025 SB2025102413
SB20251114100
SB2025111742
and 5 more
#VU115166 - Uncontrolled Recursion
CVE-2025-9714
CWE-674 Medium
No
No
2.10.0 11.09.2025 SB2025091153
SB2025091154
SB2025091275
and 36 more
#VU111225 - Integer overflow
CVE-2025-6021
CWE-190 High
No
No
2.14.4 17.06.2025 SB2025061921
SB2025062408
SB2025062747
and 63 more
#VU111224 - Stack-based buffer overflow
CVE-2025-6170
CWE-121 High
No
No
- 17.06.2025 SB2025061728
SB2025071874
SB2025071875
and 12 more
#VU111223 - Type confusion
CVE-2025-49796
CWE-843 Medium
No
No
- 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 84 more
#VU111221 - Use After Free
CVE-2025-49794
CWE-416 Medium
No
No
- 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 65 more


Showing elements 1 - 20 out of 83