What’s Vulnerable › Products

xmlsoft libxml2 vulnerabilities

117 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.

Check whether your xmlsoft libxml2 version is affected

Latest xmlsoft libxml2 vulnerabilities

• CVE-2026-86144 — (CVSS 7.8)
• CVE-2026-86143 — (CVSS 7.3)
• CVE-2026-86142 — (CVSS 7.8)
• CVE-2026-86141 — (CVSS 3.3)
• CVE-2026-86140 — (CVSS 7.8)
• CVE-2026-86139 — (CVSS 7.8)
• CVE-2026-86138 — (CVSS 7.8)
• CVE-2026-86137 — (CVSS 6.1)
• CVE-2026-11979 — Stack-Based Buffer Overflow in libxml2 (CVSS 7.8)
• CVE-2026-6653 — libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling (CVSS 9.8)
• CVE-2026-6732 — Libxml2: libxml2: denial of service via crafted xsd-validated document (CVSS 7.5)
• CVE-2026-0992 — Libxml2: libxml2: denial of service via crafted xml catalogs (CVSS 2.9)
• CVE-2026-0990 — Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing (CVSS 5.9)
• CVE-2026-0989 — Libxml2: unbounded relaxng include recursion leading to stack overflow (CVSS 3.7)
• CVE-2025-9714 — Stack overflow in libxml2 (CVSS 5.5)
• CVE-2025-8732 — libxml2 xmlcatalog xmlParseSGMLCatalog recursion (CVSS 3.3)
• CVE-2025-7425 — Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr (CVSS 7.8)
• CVE-2025-6170 — Libxml2: stack buffer overflow in xmllint interactive shell command handling (CVSS 2.5)
• CVE-2025-49795 — Libxml: null pointer dereference leads to denial of service (dos) (CVSS 7.5)
• CVE-2025-6021 — Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 (CVSS 7.5)
• CVE-2025-32415 — (CVSS 7.5)
• CVE-2025-32414 — (CVSS 7.5)
• CVE-2025-27113 — (CVSS 7.5)
• CVE-2025-24928 — (CVSS 7.7)
• CVE-2024-56171 — (CVSS 9.8)