XM
Vendor
xmlsoft
150
CVEs
0
On KEV
0
New 30D
Products
LI9.8
libxml2
xmlsoft
115 CVEs0 on KEV0 new
LI9.8
Libxslt
Xmlsoft
25 CVEs0 on KEV0 new
LI6.5
Libxml
Xmlsoft
8 CVEs0 on KEV0 new
XM7.8
Xmllint
Xmlsoft
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-86144 | LI libxml2 xmlsoft | 7.8 | Sep 5 | In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags |
| CVE-2026-86143 | LI libxml2 xmlsoft | 7.3 | Sep 5 | In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer… |
| CVE-2026-86142 | LI libxml2 xmlsoft | 7.8 | Sep 5 | In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation |
| CVE-2026-86141 | LI libxml2 xmlsoft | 3.3 | Sep 5 | xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking |
| CVE-2026-86140 | LI libxml2 xmlsoft | 7.8 | Sep 5 | In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow |
| CVE-2026-86139 | LI libxml2 xmlsoft | 7.8 | Sep 5 | In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow |
| CVE-2026-86138 | LI libxml2 xmlsoft | 7.8 | Sep 5 | In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow |
| CVE-2026-86137 | LI libxml2 xmlsoft | 6.1 | Sep 5 | In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp |
| CVE-2026-11979 | LI libxml2 xmlsoft | 7.8 | Jun 29 | Stack-Based Buffer Overflow in libxml2 |
| CVE-2026-6653 | LI Libxml2 Xmlsoft | 9.8 | Jun 22 | libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling |
| CVE-2026-6732 | LI Libxml2 Xmlsoft | 7.5 | Apr 23 | Libxml2: libxml2: denial of service via crafted xsd-validated document |
| CVE-2026-0992 | LI Libxml2 Xmlsoft | 2.9 | Jan 15 | A flaw was found in the libxml2 library |
| CVE-2026-0990 | LI Libxml2 Xmlsoft | 5.9 | Jan 15 | A flaw was found in libxml2, an XML parsing library |
| CVE-2026-0989 | LI Libxml2 Xmlsoft | 3.7 | Jan 15 | A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled |
| CVE-2025-9714 | LI Libxml2 Xmlsoft | 5.5 | Sep 10 | Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions |
| CVE-2025-8732 | LI Libxml2 Xmlsoft | 3.3 | Aug 8 | A vulnerability was found in libxml2 up to 2.14.5 |
| CVE-2025-7424 | LI Libxslt Xmlsoft | 7.5 | Jul 10 | Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes |
| CVE-2025-6170 | LI Libxml2 Xmlsoft | 2.5 | Jun 16 | Libxml2: stack buffer overflow in xmllint interactive shell command handling |
| CVE-2025-6021 | LI Libxml2 Xmlsoft | 7.5 | Jun 12 | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 |
| CVE-2025-32415 | LI Libxml2 Xmlsoft | 7.5 | Apr 17 | In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read |
| CVE-2025-32414 | LI Libxml2 Xmlsoft | 7.5 | Apr 8 | In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value |
| CVE-2025-24855 | LI Libxslt Xmlsoft | 7.8 | Mar 14 | numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored |
| CVE-2024-55549 | LI Libxslt Xmlsoft | 7.8 | Mar 14 | xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes |
| CVE-2025-27113 | LI Libxml2 Xmlsoft | 7.5 | Feb 18 | libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c |
| CVE-2025-24928 | LI Libxml2 Xmlsoft | 7.7 | Feb 18 | libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c |
| CVE-2024-56171 | LI Libxml2 Xmlsoft | 9.8 | Feb 18 | libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c |
| CVE-2022-49043 | LI Libxml2 Xmlsoft | 7.8 | Jan 26 | xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free |
| CVE-2024-40896 | LI Libxml2 Xmlsoft | 9.1 | Dec 23 | In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override… |
| CVE-2024-34459 | LI Libxml2 Xmlsoft | 7.5 | May 13 | An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7 |
| CVE-2024-25062 | LI Libxml2 Xmlsoft | 7.5 | Feb 4 | An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5 |
| CVE-2023-45322 | LI Libxml2 Xmlsoft | 6.5 | Oct 6 | libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails |
| CVE-2023-39615 | LI Libxml2 Xmlsoft | 6.5 | Aug 29 | Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c |
| CVE-2023-28484 | LI Libxml2 Xmlsoft | 6.5 | Apr 24 | In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault |
| CVE-2023-29469 | LI Libxml2 Xmlsoft | 6.5 | Apr 24 | An issue was discovered in libxml2 before 2.10.4 |
| CVE-2022-40304 | LI Libxml2 Xmlsoft | 7.8 | Nov 23 | An issue was discovered in libxml2 before 2.10.3 |
| CVE-2022-40303 | LI Libxml2 Xmlsoft | 7.5 | Nov 22 | An issue was discovered in libxml2 before 2.10.3 |
| CVE-2016-3709 | LI Libxml2 Xmlsoft | 6.1 | Jul 28 | Possible cross-site scripting vulnerability in libxml after commit 960f0e2 |
| CVE-2022-29824 | LI Libxslt Xmlsoft | 6.5 | May 3 | In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows |
| CVE-2022-23308 | LI Libxml2 Xmlsoft | 7.5 | Feb 26 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes |
| CVE-2021-30560 | LI Libxslt Xmlsoft | 8.8 | Aug 3 | Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page |
| CVE-2021-3541 | LI Libxml2 Xmlsoft | 6.5 | Jul 9 | A flaw was found in libxml2 |
| CVE-2021-3516 | XM Xmllint Xmlsoft | 7.8 | Jun 1 | There's a flaw in libxml2's xmllint in versions before 2.9.11 |
| CVE-2021-3517 | LI Libxml2 Xmlsoft | 8.6 | May 19 | There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11 |
| CVE-2021-3518 | LI Libxml2 Xmlsoft | 8.8 | May 18 | There's a flaw in libxml2 in versions before 2.9.11 |
| CVE-2021-3537 | LI Libxml2 Xmlsoft | 5.9 | May 14 | A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference |
| CVE-2020-24977 | LI Libxml2 Xmlsoft | 6.5 | Sep 3 | GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c |
| CVE-2020-7595 | LI Libxml2 Xmlsoft | 7.5 | Jan 21 | xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation |
| CVE-2019-20388 | LI Libxml2 Xmlsoft | 7.5 | Jan 21 | xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak |
| CVE-2019-19956 | LI Libxml2 Xmlsoft | 7.5 | Dec 24 | xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs |
| CVE-2019-5815 | LI Libxslt Xmlsoft | 7.5 | Dec 11 | Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data |
| CVE-2019-18197 | LI Libxslt Xmlsoft | 7.5 | Oct 18 | In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances |
| CVE-2019-13118 | LI Libxslt Xmlsoft | 5.3 | Jul 1 | In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to… |
| CVE-2019-13117 | LI Libxslt Xmlsoft | 5.3 | Jul 1 | In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers |
| CVE-2019-11068 | LI Libxslt Xmlsoft | 9.8 | Apr 10 | libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code |
| CVE-2017-15412 | LI Libxml2 Xmlsoft | 8.8 | Aug 28 | Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a… |
| CVE-2016-9596 | LI Libxml2 Xmlsoft | 6.5 | Aug 16 | libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML… |
| CVE-2016-9598 | LI Libxml2 Xmlsoft | 6.5 | Aug 16 | libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML… |
| CVE-2018-14567 | LI Libxml2 Xmlsoft | 6.5 | Aug 16 | libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as… |
| CVE-2016-9597 | LI Libxml2 Xmlsoft | 7.5 | Jul 30 | It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a… |
| CVE-2018-14404 | LI Libxml2 Xmlsoft | 6.5 | Jul 19 | A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND… |