https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T14:53:55.416657+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-6653 CVE-2026-6653 — libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling 2026-10-01T14:53:55.419289+00:00

Affected: GNOME libxml2

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

 https://db.gcve.eu/vuln/usn-8456-1 USN-8456-1 — libxml2 vulnerability 2026-10-01T14:53:55.419336+00:00

Affected: Ubuntu:22.04:LTS: libxml2, Ubuntu:24.04:LTS: libxml2

Geoffrey Humphreys discovered that libxml2 had a use after free when parsing the internal subset of a DTD. A remote attacker could possibly use this issue to cause a denial of service or possibly execute arbitrary code.