Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-6732

Опубликовано: 23 апр. 2026
Источник: nvd
CVSS3: 6.5
CVSS3: 7.5
EPSS Низкий

Описание

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*
Версия от 2.13.0 (включая) до 2.15.3 (исключая)
Конфигурация 2

Одно из

cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*
Версия от 4.1.0 (включая) до 4.1.1.30 (исключая)
cpe:2.3:a:ibm:vios:4.1.2.0:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*
Версия от 7.2.5 (включая) до 7.2.5.12 (исключая)
cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*
Версия от 7.3.2 (включая) до 7.3.3.3 (исключая)
cpe:2.3:o:ibm:aix:7.3.4:*:*:*:*:*:*:*

EPSS

Процентиль: 47%
0.00632
Низкий

6.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-843

Связанные уязвимости

ubuntu логотип

CVE-2026-6732

CVSS3: 6.5
ubuntu
3 месяца назад

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

redhat логотип

CVE-2026-6732

CVSS3: 6.5
redhat
4 месяца назад

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

msrc логотип

CVE-2026-6732

msrc
3 месяца назад

Libxml2: libxml2: denial of service via crafted xsd-validated document

debian логотип

CVE-2026-6732

CVSS3: 6.5
debian
3 месяца назад

A flaw was found in libxml2. This vulnerability occurs when the librar ...

github логотип

GHSA-6rf6-xrp6-223m

CVSS3: 6.5
github
3 месяца назад

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

EPSS

Процентиль: 47%
0.00632
Низкий

6.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-843