Search CVE reports


Toggle filters

1 – 10 of 145 results


CVE-2026-86144

Medium priority
Needs evaluation

(In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXInclu ...)

1 affected package

libxml2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libxml2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-86143

Medium priority
Needs evaluation

(In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteC ...)

1 affected package

libxml2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libxml2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-86142

Medium priority
Needs evaluation

(In libxml2 before 2.15.4, there is a heap-based buffer overflow in xml ...)

1 affected package

libxml2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libxml2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-86141

Medium priority
Needs evaluation

(xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in x ...)

1 affected package

libxml2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libxml2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-86140

Medium priority
Needs evaluation

(In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat ...)

1 affected package

libxml2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libxml2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-86139

Medium priority
Needs evaluation

(In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer over ...)

1 affected package

libxml2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libxml2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-86138

Medium priority
Needs evaluation

(In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer o ...)

1 affected package

libxml2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libxml2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-86137

Medium priority
Needs evaluation

(In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds ...)

1 affected package

libxml2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libxml2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-11979

Negligible priority
Ignored

libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell() function processes user input using fixed-size stack buffers without proper bounds checking. By...

1 affected package

libxml2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libxml2 Ignored Ignored Ignored Ignored Ignored
Show less packages

CVE-2026-6653

Medium priority
Fixed

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

1 affected package

libxml2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libxml2 Not affected Fixed Fixed Not affected Not affected
Show less packages