Every CVE Search/ Get API key

CVE-2026-74860

Libxml2: double-free/uaf in libxml2 python bindings

8.5 HighFix available

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.66%Up 0.4 points since Sep 9, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.5

Libxml2: double-free/uaf in libxml2 python bindings

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Record
CVE-2026-74860
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-763
Updated
2026-11-06
EUVDEUVD-2026-72691 8.5

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Record
EUVD-2026-72691
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-06
GitHub AdvisoriesGHSA-8626-cqqj-mfff 8.5

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this...

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Record
GHSA-8626-cqqj-mfff
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-763
Updated
2026-11-04
NVD 8.5

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Record
CVE-2026-74860
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-763
Updated
2026-11-06
OSVBELL-CVE-2026-74860 8.5
Record
BELL-CVE-2026-74860
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-74860 8.5

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Record
DEBIAN-CVE-2026-74860
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-05
Show 23 moreShow less
OSVRHSA-2026:64463 8.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:64463
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:71585 8.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2026:71585
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:71586 8.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2026:71586
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:71641 8.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2026:71641
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:71585 8.5

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138)

  • libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks (CVE-2026-86143)

  • libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements (CVE-2026-86140)

  • libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation (CVE-2026-86142)

  • libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. (CVE-2026-86144)

  • libxml2: double-free/UAF in libxml2 Python bindings (CVE-2026-74860)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:71585
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:71586 8.5

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138)

  • libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks (CVE-2026-86143)

  • libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements (CVE-2026-86140)

  • libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation (CVE-2026-86142)

  • libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. (CVE-2026-86144)

  • libxml2: double-free/UAF in libxml2 Python bindings (CVE-2026-74860)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:71586
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:71641 8.5

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138)

  • libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks (CVE-2026-86143)

  • libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements (CVE-2026-86140)

  • libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. (CVE-2026-86144)

  • libxml2: double-free/UAF in libxml2 Python bindings (CVE-2026-74860)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:71641
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-74860 8.5

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Record
UBUNTU-CVE-2026-74860
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:71585 No score

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138)
  • libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks (CVE-2026-86143)
  • libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements (CVE-2026-86140)
  • libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation (CVE-2026-86142)
  • libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. (CVE-2026-86144)
  • libxml2: double-free/UAF in libxml2 Python bindings (CVE-2026-74860)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:71585
Updated
2026-11-02
OSVALSA-2026:71586 No score

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138)
  • libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks (CVE-2026-86143)
  • libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements (CVE-2026-86140)
  • libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation (CVE-2026-86142)
  • libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. (CVE-2026-86144)
  • libxml2: double-free/UAF in libxml2 Python bindings (CVE-2026-74860)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:71586
Updated
2026-11-02
OSVALSA-2026:71641 No score

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138)
  • libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks (CVE-2026-86143)
  • libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements (CVE-2026-86140)
  • libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. (CVE-2026-86144)
  • libxml2: double-free/UAF in libxml2 Python bindings (CVE-2026-74860)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:71641
Updated
2026-11-02
OSVAZL-100941 No score

CVE-2026-74860 affecting package libxml2 for versions less than 2.11.5-11

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Record
AZL-100941
Updated
2026-11-05
OSVCLSA-2026-1790786185 No score

libxml2: Fix of CVE-2026-74860

  • CVE-2026-74860: drop the extra Py_DECREF() on each enumeration value string in pythonAttributeDecl(), since PyList_SetItem() already steals that reference
Record
CLSA-2026-1790786185
Updated
2026-11-02
OSVCLSA-2026-1790833998 No score

libxml2: Fix of CVE-2026-74860

  • CVE-2026-74860: drop the extra Py_DECREF() on each enumeration value string in pythonAttributeDecl(), since PyList_SetItem() already steals that reference
Record
CLSA-2026-1790833998
Updated
2026-11-02
OSVCLSA-2026-1791280039 No score

libxml2: Fix of CVE-2026-74860

  • CVE-2026-74860: do not decref the attribute name string after PyList_SetItem in the Python SAX attributeDecl callback to avoid a double-free
Record
CLSA-2026-1791280039
Updated
2026-11-02
OSVCLSA-2026-1791372460 No score

libxml2: Fix of CVE-2026-74860

  • CVE-2026-74860: do not decref enumerated attribute value strings after adding them to the list in the Python SAX attributeDecl callback, preventing a double free
Record
CLSA-2026-1791372460
Updated
2026-11-02
OSVCLSA-2026-1791489916 No score

Fix CVE(s): CVE-2026-74860

  • SECURITY UPDATE: double free in the Python bindings' SAX attributeDecl callback
    • debian/patches/CVE-2026-74860.patch: do not Py_DECREF() the attribute name string after PyList_SetItem() has stolen its reference in pythonAttributeDecl() in python/libxml.c
    • CVE-2026-74860
Record
CLSA-2026-1791489916
Updated
2026-11-02
OSVCLSA-2026-1791493216 No score

Fix CVE(s): CVE-2026-74860

  • SECURITY UPDATE: double free in the Python bindings' SAX attributeDecl callback
    • debian/patches/CVE-2026-74860.patch: do not Py_DECREF() the attribute name string after PyList_SetItem() has stolen its reference in pythonAttributeDecl() in python/libxml.c
    • CVE-2026-74860
Record
CLSA-2026-1791493216
Updated
2026-11-02
OSVCLSA-2026-1791551729 No score

Fix CVE(s): CVE-2026-74860

  • SECURITY UPDATE: double free in the Python SAX attributeDecl callback
    • debian/patches/CVE-2026-74860.patch: do not drop the reference to each enumeration name after PyList_SetItem() in pythonAttributeDecl() in python/libxml.c
    • CVE-2026-74860
Record
CLSA-2026-1791551729
Updated
2026-11-02
OSVCLSA-2026-1792537548 No score

Fix CVE(s): CVE-2025-7425

  • SECURITY UPDATE: double free in the Python bindings' SAX attributeDecl callback
    • debian/patches/CVE-2026-74860.patch: do not Py_DECREF() the attribute name string after PyList_SetItem() has stolen its reference in pythonAttributeDecl() in python/libxml.c
    • CVE-2026-74860
Record
CLSA-2026-1792537548
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-74860 No score

CVE-2026-74860 in libxml2 - Patched by Root

Root has patched CVE-2026-74860 in the libxml2 package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-74860
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-74860 No score

CVE-2026-74860 in libxml2 - Patched by Root

Root has patched CVE-2026-74860 in the libxml2 package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-74860
Updated
2026-11-02
OSVUSN-8787-1 No score

libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. (CVE-2026-86140)

It was discovered that libxml2 incorrectly handled certain XML documents when used with Python bindings. A remote attacker could possibly use this issue to cause applications using libxml2 to crash, resulting in a denial of service. (CVE-2026-74860)

Record
USN-8787-1
Updated
2026-11-02

Affected products

Show 13 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
libxml2
AlmaLinux:9
From an advisory covering 6 CVEs
 before 2.9.13-14.el9_8.5
2.9.13-14.el9_8.5
libxml2-devel
AlmaLinux:9
From an advisory covering 6 CVEs
 before 2.9.13-14.el9_8.5
2.9.13-14.el9_8.5
python3-libxml2
AlmaLinux:9
From an advisory covering 6 CVEs
 before 2.9.13-14.el9_8.5
2.9.13-14.el9_8.5
libxml2
AlmaLinux:10
From an advisory covering 6 CVEs
 before 2.12.5-10.el10_2.4
2.12.5-10.el10_2.4
libxml2-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 2.12.5-10.el10_2.4
2.12.5-10.el10_2.4
libxml2-static
AlmaLinux:10
From an advisory covering 6 CVEs
 before 2.12.5-10.el10_2.4
2.12.5-10.el10_2.4
python3-libxml2
AlmaLinux:10
From an advisory covering 6 CVEs
 before 2.12.5-10.el10_2.4
2.12.5-10.el10_2.4
libxml2
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.9.7-21.el8_10.9
2.9.7-21.el8_10.9
libxml2-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.9.7-21.el8_10.9
2.9.7-21.el8_10.9
python3-libxml2
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.9.7-21.el8_10.9
2.9.7-21.el8_10.9
Show 100 moreShow less
Affected packages
PackageAffectedFixed
libxml2
Azure Linux:3
 before 2.11.5-11
2.11.5-11
libxml2
Alpaquita:23
 2.10.3-r2 up to 2.10.4-r11
2.10.4-r11
libxml2
Alpaquita:25
 2.13.8-r0 up to 2.13.9-r5
2.13.9-r5
libxml2
Alpaquita:stream
 2.10.3-r2 up to 2.13.9-r6
2.13.9-r6
libxml2
BellSoft Hardened Containers:23
 2.10.3-r2 up to 2.10.4-r11
2.10.4-r11
libxml2
BellSoft Hardened Containers:25
 2.13.8-r0 up to 2.13.9-r5
2.13.9-r5
libxml2
BellSoft Hardened Containers:stream
 2.10.3-r2 up to 2.13.9-r6
2.13.9-r6
libxml2
TuxCare:AlmaLinux:9.6
 before 2.9.13-12.el9_6.tuxcare.els10
2.9.13-12.el9_6.tuxcare.els10
libxml2-devel
TuxCare:AlmaLinux:9.6
 before 2.9.13-12.el9_6.tuxcare.els10
2.9.13-12.el9_6.tuxcare.els10
libxml2-static
TuxCare:AlmaLinux:9.6
 before 2.9.13-12.el9_6.tuxcare.els10
2.9.13-12.el9_6.tuxcare.els10
python3-libxml2
TuxCare:AlmaLinux:9.6
 before 2.9.13-12.el9_6.tuxcare.els10
2.9.13-12.el9_6.tuxcare.els10
libxml2
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els18
2.9.13-3.el9_2.1.tuxcare.els18
libxml2-devel
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els18
2.9.13-3.el9_2.1.tuxcare.els18
libxml2-static
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els18
2.9.13-3.el9_2.1.tuxcare.els18
python3-libxml2
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els18
2.9.13-3.el9_2.1.tuxcare.els18
libxml2
TuxCare:CentOS:8.4
 before 2.9.7-9.el8_4.2.tuxcare.els19
2.9.7-9.el8_4.2.tuxcare.els19
libxml2-devel
TuxCare:CentOS:8.4
 before 2.9.7-9.el8_4.2.tuxcare.els19
2.9.7-9.el8_4.2.tuxcare.els19
libxml2-static
TuxCare:CentOS:8.4
 before 2.9.7-9.el8_4.2.tuxcare.els19
2.9.7-9.el8_4.2.tuxcare.els19
python3-libxml2
TuxCare:CentOS:8.4
 before 2.9.7-9.el8_4.2.tuxcare.els19
2.9.7-9.el8_4.2.tuxcare.els19
libxml2
TuxCare:CentOS-Stream:8
 before 2.9.7-18.el8.tuxcare.els14
2.9.7-18.el8.tuxcare.els14
libxml2-devel
TuxCare:CentOS-Stream:8
 before 2.9.7-18.el8.tuxcare.els14
2.9.7-18.el8.tuxcare.els14
libxml2-static
TuxCare:CentOS-Stream:8
 before 2.9.7-18.el8.tuxcare.els14
2.9.7-18.el8.tuxcare.els14
python3-libxml2
TuxCare:CentOS-Stream:8
 before 2.9.7-18.el8.tuxcare.els14
2.9.7-18.el8.tuxcare.els14
libxml2
TuxCare:Ubuntu:20.04
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
libxml2-dev
TuxCare:Ubuntu:20.04
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
libxml2-doc
TuxCare:Ubuntu:20.04
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
libxml2-utils
TuxCare:Ubuntu:20.04
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
python-libxml2
TuxCare:Ubuntu:20.04
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
python3-libxml2
TuxCare:Ubuntu:20.04
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
libxml2
TuxCare:Ubuntu:18.04
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
libxml2-dev
TuxCare:Ubuntu:18.04
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
libxml2-doc
TuxCare:Ubuntu:18.04
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
libxml2-utils
TuxCare:Ubuntu:18.04
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
python-libxml2
TuxCare:Ubuntu:18.04
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
python3-libxml2
TuxCare:Ubuntu:18.04
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12
libxml2
TuxCare:Ubuntu:16.04
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17
libxml2-dev
TuxCare:Ubuntu:16.04
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17
libxml2-doc
TuxCare:Ubuntu:16.04
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17
libxml2-utils
TuxCare:Ubuntu:16.04
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17
python-libxml2
TuxCare:Ubuntu:16.04
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17
libxml2
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
libxml2-dev
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
libxml2-doc
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
libxml2-utils
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
python-libxml2
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
python3-libxml2
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16
libxml2
Debian:12
 All versions, plus listed versions
2.12.3+dfsg-0exp12.12.5+dfsg-0exp12.12.6+dfsg-0exp12.12.6+dfsg-0exp22.12.7+dfsg+really2.9.14-0.1
Show 44 moreShow less
2.12.7+dfsg+really2.9.14-0.22.12.7+dfsg+really2.9.14-0.32.12.7+dfsg+really2.9.14-0.42.12.7+dfsg+really2.9.14-12.12.7+dfsg+really2.9.14-22.12.7+dfsg+really2.9.14-2.12.12.7+dfsg-12.12.7+dfsg-22.12.7+dfsg-32.13.1+dfsg-0exp12.13.3+dfsg-0exp12.13.3+dfsg-0exp22.14.1+dfsg-0exp12.14.2+dfsg-0exp12.14.3+dfsg-0exp12.14.3+dfsg-0exp22.14.3+dfsg-0exp32.14.4+dfsg-0exp12.14.5+dfsg-0.12.14.5+dfsg-0.22.14.5+dfsg-0exp12.14.5+dfsg-0exp22.14.6+dfsg-0.12.15.0+dfsg-0.12.15.0+dfsg-0.22.15.0+dfsg-0.32.15.1+dfsg-0.12.15.1+dfsg-0.22.15.1+dfsg-0.32.15.1+dfsg-0.42.15.1+dfsg-0.52.15.1+dfsg-12.15.1+dfsg-22.15.2+dfsg-0.12.15.3+dfsg-12.15.4+dfsg-12.9.14+dfsg-1.22.9.14+dfsg-1.32.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u22.9.14+dfsg-1.3~deb12u32.9.14+dfsg-1.3~deb12u42.9.14+dfsg-1.3~deb12u52.9.14+dfsg-1.3~deb12u6
 None known
libxml2
Debian:13
 All versions, plus listed versions
2.12.7+dfsg+really2.9.14-2.12.12.7+dfsg+really2.9.14-2.1+deb13u12.12.7+dfsg+really2.9.14-2.1+deb13u22.12.7+dfsg+really2.9.14-2.1+deb13u32.13.1+dfsg-0exp1
Show 26 moreShow less
2.13.3+dfsg-0exp12.13.3+dfsg-0exp22.14.1+dfsg-0exp12.14.2+dfsg-0exp12.14.3+dfsg-0exp12.14.3+dfsg-0exp22.14.3+dfsg-0exp32.14.4+dfsg-0exp12.14.5+dfsg-0.12.14.5+dfsg-0.22.14.5+dfsg-0exp12.14.5+dfsg-0exp22.14.6+dfsg-0.12.15.0+dfsg-0.12.15.0+dfsg-0.22.15.0+dfsg-0.32.15.1+dfsg-0.12.15.1+dfsg-0.22.15.1+dfsg-0.32.15.1+dfsg-0.42.15.1+dfsg-0.52.15.1+dfsg-12.15.1+dfsg-22.15.2+dfsg-0.12.15.3+dfsg-12.15.4+dfsg-1
 None known
libxml2
Debian:14
 before 2.15.3+dfsg-1, plus listed versions
2.12.7+dfsg+really2.9.14-2.12.13.1+dfsg-0exp12.13.3+dfsg-0exp12.13.3+dfsg-0exp22.14.1+dfsg-0exp1
Show 21 moreShow less
2.14.2+dfsg-0exp12.14.3+dfsg-0exp12.14.3+dfsg-0exp22.14.3+dfsg-0exp32.14.4+dfsg-0exp12.14.5+dfsg-0.12.14.5+dfsg-0.22.14.5+dfsg-0exp12.14.5+dfsg-0exp22.14.6+dfsg-0.12.15.0+dfsg-0.12.15.0+dfsg-0.22.15.0+dfsg-0.32.15.1+dfsg-0.12.15.1+dfsg-0.22.15.1+dfsg-0.32.15.1+dfsg-0.42.15.1+dfsg-0.52.15.1+dfsg-12.15.1+dfsg-22.15.2+dfsg-0.1
2.15.3+dfsg-1
libxml2
Red Hat:hummingbird:1
From an advisory covering 9 CVEs
 before 0:2.15.4-0.1.hum1
0:2.15.4-0.1.hum1
libxml2-16
Red Hat:hummingbird:1
From an advisory covering 9 CVEs
 before 0:2.15.4-0.1.hum1
0:2.15.4-0.1.hum1
libxml2-devel
Red Hat:hummingbird:1
From an advisory covering 9 CVEs
 before 0:2.15.4-0.1.hum1
0:2.15.4-0.1.hum1
libxml2-static
Red Hat:hummingbird:1
From an advisory covering 9 CVEs
 before 0:2.15.4-0.1.hum1
0:2.15.4-0.1.hum1
python3-libxml2
Red Hat:hummingbird:1
From an advisory covering 9 CVEs
 before 0:2.15.4-0.1.hum1
0:2.15.4-0.1.hum1
libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:2.9.13-14.el9_8.5
0:2.9.13-14.el9_8.5
libxml2-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:2.9.13-14.el9_8.5
0:2.9.13-14.el9_8.5
libxml2-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:2.9.13-14.el9_8.5
0:2.9.13-14.el9_8.5
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:2.9.13-14.el9_8.5
0:2.9.13-14.el9_8.5
libxml2
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:2.9.13-14.el9_8.5
0:2.9.13-14.el9_8.5
libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:2.9.13-14.el9_8.5
0:2.9.13-14.el9_8.5
libxml2-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:2.9.13-14.el9_8.5
0:2.9.13-14.el9_8.5
python3-libxml2
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:2.9.13-14.el9_8.5
0:2.9.13-14.el9_8.5
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:2.9.13-14.el9_8.5
0:2.9.13-14.el9_8.5
libxml2-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:2.12.5-10.el10_2.4
0:2.12.5-10.el10_2.4
libxml2-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:2.12.5-10.el10_2.4
0:2.12.5-10.el10_2.4
libxml2-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:2.12.5-10.el10_2.4
0:2.12.5-10.el10_2.4
python3-libxml2-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:2.12.5-10.el10_2.4
0:2.12.5-10.el10_2.4
libxml2
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:2.12.5-10.el10_2.4
0:2.12.5-10.el10_2.4
python3-libxml2
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:2.12.5-10.el10_2.4
0:2.12.5-10.el10_2.4
libxml2-static
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:2.12.5-10.el10_2.4
0:2.12.5-10.el10_2.4
libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.9.7-21.el8_10.9
0:2.9.7-21.el8_10.9
libxml2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.9.7-21.el8_10.9
0:2.9.7-21.el8_10.9
libxml2-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.9.7-21.el8_10.9
0:2.9.7-21.el8_10.9
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.9.7-21.el8_10.9
0:2.9.7-21.el8_10.9
libxml2
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:2.9.7-21.el8_10.9
0:2.9.7-21.el8_10.9
libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:2.9.7-21.el8_10.9
0:2.9.7-21.el8_10.9
libxml2-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:2.9.7-21.el8_10.9
0:2.9.7-21.el8_10.9
python3-libxml2
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:2.9.7-21.el8_10.9
0:2.9.7-21.el8_10.9
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:2.9.7-21.el8_10.9
0:2.9.7-21.el8_10.9
libxml2
Rocky Linux:9
From an advisory covering 6 CVEs
 before 0:2.9.13-14.el9_8.5
0:2.9.13-14.el9_8.5
libxml2
Rocky Linux:10
From an advisory covering 6 CVEs
 before 0:2.12.5-10.el10_2.4
0:2.12.5-10.el10_2.4
libxml2
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.9.7-21.el8_10.9
0:2.9.7-21.el8_10.9
libxml2
Root:Debian:12
 before 2.9.14+dfsg-1.3~deb12u6.aikido.19
2.9.14+dfsg-1.3~deb12u6.aikido.192.9.14+dfsg-1.3~deb12u6.aikido.20
rootio-libxml2
Root:Debian:12
 before 2.9.14+dfsg-1.3~deb12u6.aikido.19
2.9.14+dfsg-1.3~deb12u6.aikido.192.9.14+dfsg-1.3~deb12u6.aikido.20
libxml2
Root:Debian:13
 before 2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.16
2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.16
rootio-libxml2
Root:Debian:13
 before 2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.16
2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.16
libxml2
Ubuntu:Pro:14.04:LTS
 before 2.9.1+dfsg1-3ubuntu4.13+esm12, plus listed versions
2.9.1+dfsg1-3ubuntu22.9.1+dfsg1-3ubuntu32.9.1+dfsg1-3ubuntu42.9.1+dfsg1-3ubuntu4.12.9.1+dfsg1-3ubuntu4.2
Show 22 moreShow less
2.9.1+dfsg1-3ubuntu4.32.9.1+dfsg1-3ubuntu4.42.9.1+dfsg1-3ubuntu4.52.9.1+dfsg1-3ubuntu4.62.9.1+dfsg1-3ubuntu4.72.9.1+dfsg1-3ubuntu4.82.9.1+dfsg1-3ubuntu4.92.9.1+dfsg1-3ubuntu4.102.9.1+dfsg1-3ubuntu4.112.9.1+dfsg1-3ubuntu4.122.9.1+dfsg1-3ubuntu4.132.9.1+dfsg1-3ubuntu4.13+esm12.9.1+dfsg1-3ubuntu4.13+esm22.9.1+dfsg1-3ubuntu4.13+esm32.9.1+dfsg1-3ubuntu4.13+esm42.9.1+dfsg1-3ubuntu4.13+esm52.9.1+dfsg1-3ubuntu4.13+esm62.9.1+dfsg1-3ubuntu4.13+esm72.9.1+dfsg1-3ubuntu4.13+esm82.9.1+dfsg1-3ubuntu4.13+esm92.9.1+dfsg1-3ubuntu4.13+esm102.9.1+dfsg1-3ubuntu4.13+esm11
2.9.1+dfsg1-3ubuntu4.13+esm12
libxml2
Ubuntu:Pro:16.04:LTS
 before 2.9.3+dfsg1-1ubuntu0.7+esm13, plus listed versions
2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1
Show 19 moreShow less
2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm22.9.3+dfsg1-1ubuntu0.7+esm32.9.3+dfsg1-1ubuntu0.7+esm42.9.3+dfsg1-1ubuntu0.7+esm52.9.3+dfsg1-1ubuntu0.7+esm62.9.3+dfsg1-1ubuntu0.7+esm72.9.3+dfsg1-1ubuntu0.7+esm82.9.3+dfsg1-1ubuntu0.7+esm92.9.3+dfsg1-1ubuntu0.7+esm102.9.3+dfsg1-1ubuntu0.7+esm112.9.3+dfsg1-1ubuntu0.7+esm12
2.9.3+dfsg1-1ubuntu0.7+esm13
libxml2
Ubuntu:Pro:18.04:LTS
 before 2.9.4+dfsg1-6.1ubuntu1.9+esm8, plus listed versions
2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1
Show 16 moreShow less
2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.62.9.4+dfsg1-6.1ubuntu1.72.9.4+dfsg1-6.1ubuntu1.82.9.4+dfsg1-6.1ubuntu1.92.9.4+dfsg1-6.1ubuntu1.9+esm12.9.4+dfsg1-6.1ubuntu1.9+esm22.9.4+dfsg1-6.1ubuntu1.9+esm32.9.4+dfsg1-6.1ubuntu1.9+esm42.9.4+dfsg1-6.1ubuntu1.9+esm52.9.4+dfsg1-6.1ubuntu1.9+esm62.9.4+dfsg1-6.1ubuntu1.9+esm7
2.9.4+dfsg1-6.1ubuntu1.9+esm8
libxml2
Ubuntu:Pro:20.04:LTS
 before 2.9.10+dfsg-5ubuntu0.20.04.10+esm5, plus listed versions
2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3
Show 17 moreShow less
2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.32.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.52.9.10+dfsg-5ubuntu0.20.04.62.9.10+dfsg-5ubuntu0.20.04.72.9.10+dfsg-5ubuntu0.20.04.82.9.10+dfsg-5ubuntu0.20.04.92.9.10+dfsg-5ubuntu0.20.04.102.9.10+dfsg-5ubuntu0.20.04.10+esm12.9.10+dfsg-5ubuntu0.20.04.10+esm22.9.10+dfsg-5ubuntu0.20.04.10+esm32.9.10+dfsg-5ubuntu0.20.04.10+esm4
2.9.10+dfsg-5ubuntu0.20.04.10+esm5
libxml2
Ubuntu:22.04:LTS
 before 2.9.13+dfsg-1ubuntu0.13, plus listed versions
2.9.12+dfsg-42.9.12+dfsg-52.9.12+dfsg-62.9.13+dfsg-12.9.13+dfsg-1build1
Show 12 moreShow less
2.9.13+dfsg-1ubuntu0.12.9.13+dfsg-1ubuntu0.22.9.13+dfsg-1ubuntu0.32.9.13+dfsg-1ubuntu0.42.9.13+dfsg-1ubuntu0.52.9.13+dfsg-1ubuntu0.62.9.13+dfsg-1ubuntu0.72.9.13+dfsg-1ubuntu0.82.9.13+dfsg-1ubuntu0.92.9.13+dfsg-1ubuntu0.102.9.13+dfsg-1ubuntu0.112.9.13+dfsg-1ubuntu0.12
2.9.13+dfsg-1ubuntu0.13
libxml2
Ubuntu:24.04:LTS
 before 2.9.14+dfsg-1.3ubuntu3.9, plus listed versions
2.9.14+dfsg-1.32.9.14+dfsg-1.3build12.9.14+dfsg-1.3build22.9.14+dfsg-1.3build32.9.14+dfsg-1.3ubuntu1
Show 10 moreShow less
2.9.14+dfsg-1.3ubuntu22.9.14+dfsg-1.3ubuntu32.9.14+dfsg-1.3ubuntu3.12.9.14+dfsg-1.3ubuntu3.22.9.14+dfsg-1.3ubuntu3.32.9.14+dfsg-1.3ubuntu3.42.9.14+dfsg-1.3ubuntu3.52.9.14+dfsg-1.3ubuntu3.62.9.14+dfsg-1.3ubuntu3.72.9.14+dfsg-1.3ubuntu3.8
2.9.14+dfsg-1.3ubuntu3.9
libxml2
Ubuntu:26.04:LTS
 before 2.15.2+dfsg-0.1ubuntu0.2, plus listed versions
2.14.5+dfsg-0.22.14.5+dfsg-0.2build12.15.1+dfsg-0.32.15.1+dfsg-0.42.15.1+dfsg-1
Show 5 moreShow less
2.15.1+dfsg-22.15.1+dfsg-2ubuntu12.15.1+dfsg-2ubuntu22.15.2+dfsg-0.12.15.2+dfsg-0.1ubuntu0.1
2.15.2+dfsg-0.1ubuntu0.2
libxml2
Ubuntu:Pro:14.04:LTS
From an advisory covering 2 CVEs
 before 2.9.1+dfsg1-3ubuntu4.13+esm12, plus listed versions
2.9.1+dfsg1-3ubuntu22.9.1+dfsg1-3ubuntu32.9.1+dfsg1-3ubuntu42.9.1+dfsg1-3ubuntu4.12.9.1+dfsg1-3ubuntu4.2
Show 22 moreShow less
2.9.1+dfsg1-3ubuntu4.32.9.1+dfsg1-3ubuntu4.42.9.1+dfsg1-3ubuntu4.52.9.1+dfsg1-3ubuntu4.62.9.1+dfsg1-3ubuntu4.72.9.1+dfsg1-3ubuntu4.82.9.1+dfsg1-3ubuntu4.92.9.1+dfsg1-3ubuntu4.102.9.1+dfsg1-3ubuntu4.112.9.1+dfsg1-3ubuntu4.122.9.1+dfsg1-3ubuntu4.132.9.1+dfsg1-3ubuntu4.13+esm12.9.1+dfsg1-3ubuntu4.13+esm22.9.1+dfsg1-3ubuntu4.13+esm32.9.1+dfsg1-3ubuntu4.13+esm42.9.1+dfsg1-3ubuntu4.13+esm52.9.1+dfsg1-3ubuntu4.13+esm62.9.1+dfsg1-3ubuntu4.13+esm72.9.1+dfsg1-3ubuntu4.13+esm82.9.1+dfsg1-3ubuntu4.13+esm92.9.1+dfsg1-3ubuntu4.13+esm102.9.1+dfsg1-3ubuntu4.13+esm11
2.9.1+dfsg1-3ubuntu4.13+esm12
libxml2
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+esm13, plus listed versions
2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1
Show 19 moreShow less
2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm22.9.3+dfsg1-1ubuntu0.7+esm32.9.3+dfsg1-1ubuntu0.7+esm42.9.3+dfsg1-1ubuntu0.7+esm52.9.3+dfsg1-1ubuntu0.7+esm62.9.3+dfsg1-1ubuntu0.7+esm72.9.3+dfsg1-1ubuntu0.7+esm82.9.3+dfsg1-1ubuntu0.7+esm92.9.3+dfsg1-1ubuntu0.7+esm102.9.3+dfsg1-1ubuntu0.7+esm112.9.3+dfsg1-1ubuntu0.7+esm12
2.9.3+dfsg1-1ubuntu0.7+esm13
libxml2
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+esm8, plus listed versions
2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1
Show 16 moreShow less
2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.62.9.4+dfsg1-6.1ubuntu1.72.9.4+dfsg1-6.1ubuntu1.82.9.4+dfsg1-6.1ubuntu1.92.9.4+dfsg1-6.1ubuntu1.9+esm12.9.4+dfsg1-6.1ubuntu1.9+esm22.9.4+dfsg1-6.1ubuntu1.9+esm32.9.4+dfsg1-6.1ubuntu1.9+esm42.9.4+dfsg1-6.1ubuntu1.9+esm52.9.4+dfsg1-6.1ubuntu1.9+esm62.9.4+dfsg1-6.1ubuntu1.9+esm7
2.9.4+dfsg1-6.1ubuntu1.9+esm8
libxml2
Ubuntu:Pro:20.04:LTS
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+esm5, plus listed versions
2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3
Show 17 moreShow less
2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.32.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.52.9.10+dfsg-5ubuntu0.20.04.62.9.10+dfsg-5ubuntu0.20.04.72.9.10+dfsg-5ubuntu0.20.04.82.9.10+dfsg-5ubuntu0.20.04.92.9.10+dfsg-5ubuntu0.20.04.102.9.10+dfsg-5ubuntu0.20.04.10+esm12.9.10+dfsg-5ubuntu0.20.04.10+esm22.9.10+dfsg-5ubuntu0.20.04.10+esm32.9.10+dfsg-5ubuntu0.20.04.10+esm4
2.9.10+dfsg-5ubuntu0.20.04.10+esm5
libxml2
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 2.9.13+dfsg-1ubuntu0.13, plus listed versions
2.9.12+dfsg-42.9.12+dfsg-52.9.12+dfsg-62.9.13+dfsg-12.9.13+dfsg-1build1
Show 12 moreShow less
2.9.13+dfsg-1ubuntu0.12.9.13+dfsg-1ubuntu0.22.9.13+dfsg-1ubuntu0.32.9.13+dfsg-1ubuntu0.42.9.13+dfsg-1ubuntu0.52.9.13+dfsg-1ubuntu0.62.9.13+dfsg-1ubuntu0.72.9.13+dfsg-1ubuntu0.82.9.13+dfsg-1ubuntu0.92.9.13+dfsg-1ubuntu0.102.9.13+dfsg-1ubuntu0.112.9.13+dfsg-1ubuntu0.12
2.9.13+dfsg-1ubuntu0.13
libxml2
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 2.9.14+dfsg-1.3ubuntu3.9, plus listed versions
2.9.14+dfsg-1.32.9.14+dfsg-1.3build12.9.14+dfsg-1.3build22.9.14+dfsg-1.3build32.9.14+dfsg-1.3ubuntu1
Show 10 moreShow less
2.9.14+dfsg-1.3ubuntu22.9.14+dfsg-1.3ubuntu32.9.14+dfsg-1.3ubuntu3.12.9.14+dfsg-1.3ubuntu3.22.9.14+dfsg-1.3ubuntu3.32.9.14+dfsg-1.3ubuntu3.42.9.14+dfsg-1.3ubuntu3.52.9.14+dfsg-1.3ubuntu3.62.9.14+dfsg-1.3ubuntu3.72.9.14+dfsg-1.3ubuntu3.8
2.9.14+dfsg-1.3ubuntu3.9
libxml2
Ubuntu:26.04:LTS
From an advisory covering 2 CVEs
 before 2.15.2+dfsg-0.1ubuntu0.2, plus listed versions
2.14.5+dfsg-0.22.14.5+dfsg-0.2build12.15.1+dfsg-0.32.15.1+dfsg-0.42.15.1+dfsg-1
Show 5 moreShow less
2.15.1+dfsg-22.15.1+dfsg-2ubuntu12.15.1+dfsg-2ubuntu22.15.2+dfsg-0.12.15.2+dfsg-0.1ubuntu0.1
2.15.2+dfsg-0.1ubuntu0.2

History

History
RecordedChangedSources
affectedCVE List, EUVD
productsCVE List, EUVD, GitHub Advisories, NVD, OSV
facts, referencesCVE List, EUVD, GitHub Advisories, NVD
referencesCVE List, OSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-74860 is a high vulnerability (CVSS 8.5) in Red Hat Cert Manager Support For Red Hat Openshift Release 1.20, published September 8, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.66%, the 51st percentile. Fixed in libxml2 2.11.5-11.

References

Show 120 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open