Xmlsoft Libxslt vulnerabilities

• gnome libxslt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes CVE-2025-7424 Fix available 7.5 HighJuly 10, 2025
• gnome libxslt numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an... CVE-2025-24855 Fix available 7.8 HighMarch 14, 2025
• gnome libxslt xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion... CVE-2024-55549 Fix available 7.8 HighMarch 14, 2025
• xmlsoft libxml2, libxslt, debian linux +19 more +21 more In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ... CVE-2022-29824 Fix available 6.5 MediumMay 3, 2022
• google chrome, xmlsoft libxslt, debian linux +1 more +3 more Nokogiri has vulnerable dependencies on libxml2 and libxslt CVE-2021-30560 Fix available EPSS 20.4% 8.8 HighJuly 21, 2021
• xmlsoft libxslt, canonical ubuntu linux, debian linux +2 more Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability CVE-2019-18197 Fix available 7.5 HighOctober 18, 2019
• xmlsoft libxslt, apple icloud, iphone os +22 more +24 more libxslt Type Confusion vulnerability that affects Nokogiri CVE-2019-13118 Fix available 5.3 MediumJuly 1, 2019
• xmlsoft libxslt, canonical ubuntu linux, debian linux +3 more +5 more Uninitialized read in Nokogiri gem CVE-2019-13117 Fix available 5.3 MediumJuly 1, 2019
• xmlsoft libxslt, debian linux, google chrome +2 more Nokogiri implementation of libxslt vulnerable to heap corruption CVE-2019-5815 Fix available 7.5 HighMay 4, 2019
• xmlsoft libxslt, canonical ubuntu linux, debian linux +19 more +21 more Nokogiri vulnerable to libxslt protection mechanism bypass CVE-2019-11068 Fix available 9.8 CriticalApril 10, 2019
• xmlsoft libxslt In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random... CVE-2015-9019 Fix available 5.3 MediumApril 5, 2017
• debian linux, google chrome, xmlsoft libxslt +3 more +5 more Nokogiri implementation of libxslt lacks integer overflow checks CVE-2017-5029 Fix available 8.8 HighMarch 10, 2017
• apple icloud, itunes, xmlsoft libxslt +2 more +4 more libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud... CVE-2016-4610 Fix available 9.8 CriticalJuly 22, 2016
• apple icloud, itunes, tvos +6 more +8 more libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud... CVE-2016-4609 Fix available 9.8 CriticalJuly 22, 2016
• apple icloud, itunes, xmlsoft libxslt +1 more +3 more libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud... CVE-2016-4608 Fix available 9.8 CriticalJuly 22, 2016
• apple icloud, itunes, tvos +5 more +7 more libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud... CVE-2016-4607 Fix available 9.8 CriticalJuly 22, 2016
• google chrome, xmlsoft libxslt +1 more numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the... CVE-2016-1684 Fix available 7.5 HighMay 31, 2016
• google chrome, xmlsoft libxslt, canonical ubuntu linux +7 more +9 more numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles... CVE-2016-1683 Fix available 7.5 HighMay 31, 2016
• xmlsoft libxslt, apple iphone os, mac os x +2 more +4 more The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node... CVE-2015-7995 Fix available 5.0 MediumNovember 5, 2015
• xmlsoft libxslt xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service ... CVE-2013-4520 4.3 MediumDecember 14, 2013
• xmlsoft libxslt, opensuse +1 more libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer... CVE-2012-6139 Fix available 5.0 MediumApril 3, 2013
• google chrome, xmlsoft libxslt, apple iphone os +2 more libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly... CVE-2012-2870 Fix available 4.3 MediumAugust 31, 2012
• google chrome, xmlsoft libxslt, suse linux enterprise desktop +2 more +4 more libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial... CVE-2011-3970 Fix available 4.3 MediumFebruary 9, 2012
• google chrome, xmlsoft libxslt +1 more The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in... CVE-2011-1202 Fix available 4.3 MediumMarch 11, 2011
• xmlsoft libxslt Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction... CVE-2008-2935 Public exploitFix available EPSS 12.8% 7.5 HighJuly 31, 2008