Product by Open Source
Libxml2
15 known vulnerabilities in Libxml2 (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-34459 | XMLSoft libxml2: Buffer Over-read | 7.5 | |
| High | CVE-2026-74860 | Libxml2: double-free/uaf in libxml2 python bindings | 8.5 | |
| Critical | CVE-2026-6653 | libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling | 9.8 | |
| High | CVE-2026-6732 | Libxml2: libxml2: denial of service via crafted xsd-validated document | 7.5 | |
| High | CVE-2026-86140 | XMLSoft libxml2: Stack-based Buffer Overflow | 8.0 | |
| High | CVE-2026-86143 | XMLSoft libxml2: Integer Coercion Error | 6.9 | |
| High | CVE-2026-86139 | XMLSoft libxml2: Integer Overflow or Wraparound | 6.9 | |
| High | CVE-2026-86142 | XMLSoft libxml2: Heap-based Buffer Overflow | 6.9 | |
| High | CVE-2026-86138 | XMLSoft libxml2: Integer Overflow or Wraparound | 6.9 | |
| High | CVE-2025-32414 | XMLSoft libxml2: Return of Wrong Status Code | 5.6 | |
| High | CVE-2026-86144 | XMLSoft libxml2: Incorrect Resource Transfer Between Spheres | 5.6 | |
| High | CVE-2025-32415 | XMLSoft libxml2: Improper Validation of Specified Quantity in Input | 2.9 | |
| Low | CVE-2025-6170 | Libxml2: stack buffer overflow in xmllint interactive shell command handling | 2.5 | |
| Medium | CVE-2026-86137 | XMLSoft libxml2: Out-of-bounds Read | 2.9 | |
| Low | CVE-2026-86141 | XMLSoft libxml2: Unchecked Return Value | 2.9 |