Approved changes feed: RSS · Atom
cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Xmlsoft (be3c3366-cde4-54a5-8785-eb1f04df6881) |
|---|---|
| Product | Libxml2 (b6949b35-db17-5df6-ad91-0baa70a48eb5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libxml2 |
purl2cpe | 2026-06-01 10:12:19.601249 |
pkg:deb/ubuntu/libxml2 |
purl2cpe | 2026-06-01 10:12:19.601251 |
pkg:github/gnome/libxml2 |
purl2cpe | 2026-06-01 10:12:19.601253 |
pkg:gitlab/redhat/libxml2 |
purl2cpe | 2026-06-01 10:12:19.601254 |
pkg:rpm/fedora/libxml2 |
purl2cpe | 2026-06-01 10:12:19.601256 |
pkg:rpm/opensuse/libxml2 |
purl2cpe | 2026-06-01 10:12:19.601257 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-86139 |
vulnerable | 2026-09-16 04:32:58.957698 |
Details available
MEDIUM (6.9)
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.
Published: 2026-09-05T04:23:14.686Z
Updated: 2026-09-08T13:04:24.068Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86142 |
vulnerable | 2026-09-16 04:32:58.784213 |
Details available
MEDIUM (6.9)
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.
Published: 2026-09-05T04:29:33.323Z
Updated: 2026-09-14T13:50:49.902Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86144 |
vulnerable | 2026-09-16 04:32:58.605820 |
Details available
MEDIUM (5.6)
In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entity injection, SSRF, or a denial of service (e.g., for an attacker-controlled internet resource that is intentionally slow).
Published: 2026-09-05T04:34:43.972Z
Updated: 2026-09-08T13:04:51.845Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86141 |
vulnerable | 2026-09-16 04:32:58.578109 |
Details available
LOW (2.9)
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.
Published: 2026-09-05T04:27:59.795Z
Updated: 2026-09-09T19:15:52.468Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86137 |
vulnerable | 2026-09-16 04:32:58.443017 |
Details available
LOW (2.9)
In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
Published: 2026-09-05T04:19:30.745Z
Updated: 2026-09-14T13:50:50.073Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11979 |
vulnerable | 2026-07-29 00:23:31.844973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6732 |
vulnerable | 2026-06-08 08:07:05.019703 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9714 |
vulnerable | 2026-06-08 07:47:09.627197 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6021 |
vulnerable | 2026-06-08 07:43:14.038863 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32415 |
vulnerable | 2026-06-08 07:18:59.727450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32414 |
vulnerable | 2026-06-08 07:18:59.727053 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27113 |
vulnerable | 2026-06-08 07:14:54.170555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24928 |
vulnerable | 2026-06-08 07:12:50.178032 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56171 |
vulnerable | 2026-06-08 06:54:17.473959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-40896 |
vulnerable | 2026-06-08 06:43:53.534431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34459 |
vulnerable | 2026-06-08 06:37:33.343707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25062 |
vulnerable | 2026-06-08 06:31:21.878817 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45322 |
vulnerable | 2026-06-08 06:12:42.512766 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29469 |
vulnerable | 2026-06-08 06:02:40.299830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28484 |
vulnerable | 2026-06-08 06:01:10.965437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-49043 |
vulnerable | 2026-06-08 05:51:35.511529 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40304 |
vulnerable | 2026-06-08 05:48:24.878062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40303 |
vulnerable | 2026-06-08 05:48:24.869457 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2309 |
not_vulnerable | 2026-06-08 05:43:35.276670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29824 |
vulnerable | 2026-06-08 05:42:48.871367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23308 |
vulnerable | 2026-06-08 05:40:56.960087 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3541 |
vulnerable | 2026-06-08 05:33:52.741171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3537 |
vulnerable | 2026-06-08 05:33:52.732829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3518 |
vulnerable | 2026-06-08 05:33:52.611562 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3517 |
vulnerable | 2026-06-08 05:33:52.597011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19956 |
vulnerable | 2026-06-08 05:13:24.107338 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14404 |
vulnerable | 2026-06-08 05:10:52.874493 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7376 |
vulnerable | 2026-06-08 05:09:55.812348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7375 |
vulnerable | 2026-06-08 05:09:55.805487 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5130 |
vulnerable | 2026-06-08 05:09:39.189214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18258 |
vulnerable | 2026-06-08 05:09:10.636126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16932 |
vulnerable | 2026-06-08 05:09:07.596327 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16931 |
vulnerable | 2026-06-08 05:09:07.595563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15412 |
vulnerable | 2026-06-08 05:08:58.849461 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9598 |
vulnerable | 2026-06-08 05:08:24.104876 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9596 |
vulnerable | 2026-06-08 05:08:24.099581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9318 |
vulnerable | 2026-06-08 05:08:23.243503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5131 |
vulnerable | 2026-06-08 05:07:56.381076 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4658 |
vulnerable | 2026-06-08 05:07:55.091307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4483 |
vulnerable | 2026-06-08 05:07:54.665951 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4449 |
vulnerable | 2026-06-08 05:07:47.453068 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4448 |
vulnerable | 2026-06-08 05:07:47.443372 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4447 |
vulnerable | 2026-06-08 05:07:47.441347 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3709 |
vulnerable | 2026-06-08 05:07:45.839265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3627 |
vulnerable | 2026-06-08 05:07:45.700637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2073 |
vulnerable | 2026-06-08 05:07:32.791506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1840 |
vulnerable | 2026-06-08 05:07:32.102137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1839 |
vulnerable | 2026-06-08 05:07:32.100825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1838 |
vulnerable | 2026-06-08 05:07:32.099230 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1837 |
vulnerable | 2026-06-08 05:07:32.097984 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1836 |
vulnerable | 2026-06-08 05:07:32.096662 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1834 |
vulnerable | 2026-06-08 05:07:32.094654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1833 |
vulnerable | 2026-06-08 05:07:32.093119 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1762 |
vulnerable | 2026-06-08 05:07:32.042174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8806 |
vulnerable | 2026-06-08 05:07:04.934236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8710 |
vulnerable | 2026-06-08 05:07:04.753683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8317 |
vulnerable | 2026-06-08 05:07:03.563612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8242 |
vulnerable | 2026-06-08 05:07:03.460923 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8241 |
vulnerable | 2026-06-08 05:07:03.460168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7500 |
vulnerable | 2026-06-08 05:07:01.167234 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7499 |
vulnerable | 2026-06-08 05:07:01.166461 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7498 |
vulnerable | 2026-06-08 05:07:01.165395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7497 |
vulnerable | 2026-06-08 05:07:01.160975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6838 |
vulnerable | 2026-06-08 05:06:53.164788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6837 |
vulnerable | 2026-06-08 05:06:53.163059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5312 |
vulnerable | 2026-06-08 05:06:49.563478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3660 |
vulnerable | 2026-06-08 05:05:42.194778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0339 |
vulnerable | 2026-06-08 05:03:47.228917 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0338 |
vulnerable | 2026-06-08 05:03:47.153102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5134 |
vulnerable | 2026-06-08 05:02:54.454666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0841 |
vulnerable | 2026-06-08 05:00:45.770881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4494 |
vulnerable | 2026-06-08 04:56:28.721663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4008 |
vulnerable | 2026-06-08 04:55:18.370852 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3529 |
vulnerable | 2026-06-08 04:50:35.152865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3281 |
vulnerable | 2026-06-08 04:50:34.021067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1564 |
vulnerable | 2026-06-08 04:47:47.934501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.