CVE-2026-6732

Katalog CVE

CVSS 7.5 · High EPSS 0,94%

Kerentanan Access of Resource Using Incompatible Type ('Type Confusion') pada xmlsoft libxml2, redhat hardened images +5 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

Rincian

Terbit di NVD

23 April 2026

Terakhir diubah

31 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

EPSS (30 hari)

0,94% peluang dieksploitasi; lebih tinggi dari 59,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2026:11503 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2026-6732 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2461300 issue tracking · advisory pihak ketiga
• https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097 exploit · issue tracking · advisory pihak ketiga
• https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411 issue tracking · advisory pihak ketiga