Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libxml2 | Aug 22, 2024 | Jul 23, 2016 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libxml2amazon-linux-ami-2-upgrade-libxml2-debuginfoamazon-linux-ami-2-upgrade-libxml2-develamazon-linux-ami-2-upgrade-libxml2-pythonamazon-linux-ami-2-upgrade-libxml2-static | Jul 23, 2020 | Jul 23, 2016 | |
| Amazon_linux | — | amazon-linux-upgrade-libxml2 | Aug 13, 2020 | Jul 23, 2016 |
| Apple Osx Libxml2 | apple-osx-upgrade-latest | Nov 11, 2016 | Jul 23, 2016 | |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Jul 23, 2016 |
| Centos_linux | — | centos-upgrade-libxml2centos-upgrade-libxml2-debuginfocentos-upgrade-libxml2-develcentos-upgrade-libxml2-pythoncentos-upgrade-libxml2-static | Apr 1, 2020 | Jul 23, 2016 |
| Debian | debian-upgrade-libxml2 | Aug 1, 2016 | Jul 23, 2016 | |
| Freebsd | freebsd-upgrade-package-chromiumfreebsd-upgrade-package-chromium-npapifreebsd-upgrade-package-chromium-pulse | Dec 10, 2025 | Jul 22, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-libxml2gentoo-linux-upgrade-www-client-chromium | Oct 30, 2017 | Jul 23, 2016 | |
| Google Chrome | google-chrome-upgrade-latest | Jul 29, 2016 | Jul 23, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-libxml2huawei-euleros-2_0_sp1-upgrade-libxml2-develhuawei-euleros-2_0_sp1-upgrade-libxml2-python | May 2, 2018 | Jul 23, 2016 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libxml2huawei-euleros-2_0_sp2-upgrade-libxml2-develhuawei-euleros-2_0_sp2-upgrade-libxml2-python | May 2, 2018 | Jul 23, 2016 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libxml2huawei-euleros-2_0_sp3-upgrade-libxml2-develhuawei-euleros-2_0_sp3-upgrade-libxml2-python | Jun 28, 2018 | Jul 23, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-libxml2oracle-linux-upgrade-libxml2-develoracle-linux-upgrade-libxml2-pythonoracle-linux-upgrade-libxml2-static | Oct 5, 2022 | Jul 20, 2016 |
| Redhat_linux | — | redhat-upgrade-libxml2redhat-upgrade-libxml2-debuginforedhat-upgrade-libxml2-develredhat-upgrade-libxml2-pythonredhat-upgrade-libxml2-static | Jul 29, 2016 | Jul 23, 2016 |
| Suse | — | suse-upgrade-chromedriversuse-upgrade-chromiumsuse-upgrade-chromium-desktop-gnomesuse-upgrade-chromium-desktop-kdesuse-upgrade-chromium-ffmpegsumosuse-upgrade-libxml2suse-upgrade-libxml2-2suse-upgrade-libxml2-2-32bitsuse-upgrade-libxml2-32bitsuse-upgrade-libxml2-develsuse-upgrade-libxml2-devel-32bitsuse-upgrade-libxml2-docsuse-upgrade-libxml2-pythonsuse-upgrade-libxml2-toolssuse-upgrade-libxml2-x86suse-upgrade-python-libxml2suse-upgrade-ruby2-5-rubygem-nokogiri | Jul 26, 2016 | Jul 23, 2016 |
| Ubuntu | ubuntu-upgrade-liboxideqtcore0ubuntu-upgrade-libxml2 | Aug 6, 2016 | Jul 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub