Filtered by vendor Redhat Subscriptions
Filtered by product Libxml2 Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-76781 1 Redhat 7 Enterprise Linux, Hardened Images, Hummingbird and 4 more 2026-11-06 5.5 Medium
A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a `nextCatalog` element lacks its mandatory `catalog` attribute, leading to the application crashing and causing a Denial of Service (DoS).
CVE-2026-6732 3 Ibm, Redhat, Xmlsoft 11 Aix, Vios, Enterprise Linux and 8 more 2026-11-05 6.5 Medium
A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.