libxml2

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions3
First seenSep 5, 2026
Last mentioned22d ago

Timeline

3 articles · newest first

USN-8910-1: libxml2 vulnerabilities

Ubuntu patched libxml2 flaws, including a heap overflow that could crash the library or allow code execution.

Ubuntu Security NoticesOct 8, 20:05 UTC · 22d agoAdvisoryCVE-2026-76781 CVE-2026-861382

USN-8787-1: libxml2 vulnerabilities

Ubuntu patched libxml2 flaws that could crash the library, enable code execution, or cause denial of service.

Ubuntu Security NoticesSep 21, 12:31 UTC · Sep 21, 2026VulnerabilityCVE-2026-86140 CVE-2026-748601 · 1 read

Re: Vulnerabilities fixed in libxml2-2.15.4

libxml2 2.15.4 patches two flaws including a heap buffer overflow in xmlDictAddQString tracked as CVE-2026-86137 and CVE-2026-86138.

oss-securitySep 5, 12:16 UTC · Sep 5, 2026VulnerabilityCVE-2026-86137 CVE-2026-861383 · 2 reads

Related CVEs

by mentions

CVE-2026-86138<1%7.8
Heap Buffer Overflow via Integer Overflow in libxml2 before 2.15.4
published Sep 5, 2026libxml2 (upstream project) libxml2
CVE-2026-74860<1%8.5
Double-free DoS in libxml2 Python bindings via crafted DTD attribute declarations
published Sep 8, 2026libxml2 (GNOME project); distributed in vendor packages tracked by Red Hat and o libxml2 with Python bindings enabled (libxml2-python / distro Python bindings), SAX parsing path
CVE-2026-86140<1%7.8
Stack Buffer Overflow in libxml2 (xmlSnprintfElements) Fixed in 2.15.4
published Sep 5, 2026libxml2 project libxml2
CVE-2026-86137<1%6.1
Out-of-bounds read in libxml2 XML regexp parser fixed in 2.15.4
published Sep 5, 2026GNOME (libxml2 project) libxml2PoC
CVE-2026-767815.5
NULL pointer dereference DoS in libxml2 XML catalogs
published Sep 17, 2026libxml2 project (GNOME/xmlsoft; packaged by distributors including Red Hat and U libxml2

Appears with

Canonicalorganization · 2
Ubuntuproduct · 2
Canonicalvendor · 2
libxml2vendor · 1
Debianorganization · 1

Entities are extracted by the model from each article. First seen Sep 5, 2026, last mentioned 22d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.