Gnome Libxml2 vulnerabilities

• gnome libxml2 In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not... CVE-2026-86144 Fix available 5.6 MediumSeptember 5, 2026
• gnome libxml2 In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse... CVE-2026-86143 Fix available 6.9 MediumSeptember 5, 2026
• gnome libxml2 In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of... CVE-2026-86142 Fix available 6.9 MediumSeptember 5, 2026
• gnome libxml2 xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a... CVE-2026-86141 Fix available 2.9 LowSeptember 5, 2026
• gnome libxml2 In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. CVE-2026-86140 Fix available 8.0 HighSeptember 5, 2026
• gnome libxml2 In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. CVE-2026-86139 Fix available 6.9 MediumSeptember 5, 2026
• gnome libxml2 In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap... CVE-2026-86138 Fix available 6.9 MediumSeptember 5, 2026
• gnome libxml2 In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds... CVE-2026-86137 Fix available 2.9 LowSeptember 5, 2026
• gnome libxml2 Stack-Based Buffer Overflow in libxml2 CVE-2026-11979 Fix availableDisputed 1.8 LowJune 29, 2026
• gnome libxml2 libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling CVE-2026-6653 Fix available 7.0 HighJune 22, 2026
• gnome libxml2, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 more Stack overflow in libxml2 CVE-2025-9714 Fix available 6.2 MediumSeptember 2, 2025
• gnome libxml2, ibm aix, vios +2 more +4 more libxml2 xmlcatalog xmlParseSGMLCatalog recursion CVE-2025-8732 Fix availableDisputed 4.8 MediumAugust 8, 2025
• gnome libxml2, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +48 more +50 more Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr CVE-2025-7425 Fix available 7.8 HighJuly 10, 2025
• gnome libxml2, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Libxml: null pointer dereference leads to denial of service (dos) CVE-2025-49795 Fix available 7.5 HighJune 12, 2025
• gnome libxml2 In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has... CVE-2025-32415 Fix available 2.9 LowApril 17, 2025
• gnome libxml2 In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the... CVE-2025-32414 Fix available 5.6 MediumApril 8, 2025
• gnome libxml2 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in... CVE-2025-27113 Fix available 2.9 LowFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in... CVE-2025-24928 Fix available 7.8 HighFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in... CVE-2024-56171 Fix available 7.8 HighFebruary 18, 2025
• gnome libxml2 xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. CVE-2022-49043 Fix available 8.1 HighJanuary 26, 2025
• gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 more In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can... CVE-2024-40896 Fix available 9.1 CriticalAugust 2, 2024
• gnome libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more Possible cross-site scripting vulnerability in libxml after commit 960f0e2. CVE-2016-3709 Fix available 6.1 MediumJuly 28, 2022
• gnome libxml2, netapp active iq unified manager, cloud backup +19 more +21 more A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all... CVE-2021-3541 Fix available 6.5 MediumMay 18, 2021
• gnome libxml2, debian linux, fedoraproject fedora +19 more +21 more Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing CVE-2021-3537 Fix available 5.9 MediumMay 10, 2021
• gnome libxml2, debian linux, fedoraproject fedora +18 more +20 more Nokogiri Implements libxml2 version vulnerable to use-after-free CVE-2021-3518 Fix available EPSS 21.9% 8.8 HighMay 5, 2021
• gnome libxml2, debian linux, fedoraproject fedora +28 more +30 more Nokogiri contains libxml Out-of-bounds Write vulnerability CVE-2021-3517 Fix available EPSS 17.0% 8.6 HighMay 5, 2021
• gnome libxml2, xmlsoft xmllint, debian linux +10 more +12 more There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit... CVE-2021-3516 Fix available 7.8 HighMay 5, 2021
• gnome libxml2, canonical ubuntu linux, debian linux +3 more +5 more It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not... CVE-2016-9597 7.5 HighFebruary 3, 2017