CVE detail
CVE-2026-6732
A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 19.5 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
6 source links · newest first
Information published.
vendormsrc.microsoft.comApr 29, 2026, 8:09 AM- https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411gitlab.gnome.org
No excerpt available.
Exploitgitlab.gnome.orgApr 23, 2026, 11:16 PM - https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097gitlab.gnome.org
No excerpt available.
Exploitgitlab.gnome.orgApr 23, 2026, 11:16 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2461300bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comApr 23, 2026, 11:16 PM - https://access.redhat.com/security/cve/CVE-2026-6732access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 23, 2026, 11:16 PM - https://access.redhat.com/errata/RHSA-2026:11503access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 23, 2026, 11:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-0992CVSS 2.9 · Low
A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements poin…
- CVE-2026-0990CVSS 5.9 · Medium
A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delega…
- CVE-2026-0989CVSS 3.7 · Low
A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving…
- CVE-2025-6170CVSS 2.5 · Low
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the i…
- CVE-2025-6021CVSS 7.5 · High
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memor…
- CVE-2025-7424CVSS 7.5 · High
A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This…