Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-74860— Libxml2: double-free/uaf in libxml2 python bindings

Quick assessment

Affected

Red Hat Red Hat Enterprise Linux 10

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

GNOME libxml2是GNOME基金会开源的一款XML文档解析与处理的软件组件。 GNOME libxml2存在资源管理错误漏洞，该漏洞源于处理包含带枚举属性值文档类型定义（DTD）的特制XML文档时，SAX attributeDecl回调处理器中字符串被释放两次，导致双重释放错误，可能致使使用libxml2 SAX绑定的Python应用程序崩溃，从而引发拒绝服务。

CVSS 8.5 · High EPSS 0.45% · P38 Updated Oct 15, 2026

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Affected Version Matrix 24

Vendor	Product	Version Range	Status
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790589912< *`	unaffected
		`1790589914< *`	unaffected
		`1790589855< *`	unaffected
Red Hat	Red Hat Cost Management On-Premise 1	`1791460851< *`	unaffected
Red Hat	Red Hat Enterprise Linux 10	`0:2.12.5-10.el10_2.4< *`	unaffected
		`any`	unaffected
Red Hat	Red Hat Enterprise Linux 6	`any`	unknown
Red Hat	Red Hat Enterprise Linux 7	`any`	affected
Red Hat	Red Hat Enterprise Linux 8	`0:2.9.7-21.el8_10.9< *`	unaffected
		`0:2.9.7-21.el8_10.9< *`	unaffected
		`any`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:2.9.13-14.el9_8.5< *`	unaffected
		`0:2.9.13-14.el9_8.5< *`	unaffected
		`any`	unaffected
Red Hat	Red Hat Hardened Images	`2.15.4-0.1.hum1< *`	unaffected
		`any`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4	`any`	unaffected
		`any`	unaffected
		`any`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1791978534< *`	unaffected
		`1791978528< *`	unaffected
		`1791978528< *`	unaffected
		`1791964013< *`	unaffected
		`1791978693< *`	unaffected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-74860

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Libxml2: double-free/uaf in libxml2 python bindings

Source: CVE Program / CVE List V5

Vulnerability Description

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

对无效指针或索引的释放

Source: CVE Program / CVE List V5

Vulnerability Title

GNOME libxml2 资源管理错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Red Hat	Red Hat Enterprise Linux 10	0:2.12.5-10.el10_2.4 ~ *	`cpe:/o:redhat:enterprise_linux:10.2`
Red Hat	Red Hat Enterprise Linux 8	0:2.9.7-21.el8_10.9 ~ *	`cpe:/a:redhat:enterprise_linux:8::appstream`
Red Hat	Red Hat Enterprise Linux 8	0:2.9.7-21.el8_10.9 ~ *	`cpe:/a:redhat:enterprise_linux:8::appstream`
Red Hat	Red Hat Enterprise Linux 9	0:2.9.13-14.el9_8.5 ~ *	`cpe:/a:redhat:enterprise_linux:9::appstream`
Red Hat	Red Hat Enterprise Linux 9	0:2.9.13-14.el9_8.5 ~ *	`cpe:/a:redhat:enterprise_linux:9::appstream`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790589912 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790589914 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790589855 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Red Hat Cost Management On-Premise 1	1791460851 ~ *	`cpe:/a:redhat:cost_management_on_premise:1::el10`
Red Hat	Red Hat Hardened Images	2.15.4-0.1.hum1 ~ *	`cpe:/a:redhat:hummingbird:1`
Red Hat	Red Hat Update Infrastructure 5	1791978534 ~ *	`cpe:/a:redhat:rhui:5::el9`
Red Hat	Red Hat Update Infrastructure 5	1791978528 ~ *	`cpe:/a:redhat:rhui:5::el9`
Red Hat	Red Hat Update Infrastructure 5	1791978528 ~ *	`cpe:/a:redhat:rhui:5::el9`
Red Hat	Red Hat Update Infrastructure 5	1791964013 ~ *	`cpe:/a:redhat:rhui:5::el9`
Red Hat	Red Hat Update Infrastructure 5	1791978693 ~ *	`cpe:/a:redhat:rhui:5::el9`
Red Hat	Red Hat Enterprise Linux 10	-	`cpe:/o:redhat:enterprise_linux:10`
Red Hat	Red Hat Enterprise Linux 6	-	`cpe:/o:redhat:enterprise_linux:6`
Red Hat	Red Hat Enterprise Linux 7	-	`cpe:/o:redhat:enterprise_linux:7`
Red Hat	Red Hat Enterprise Linux 8	-	`cpe:/o:redhat:enterprise_linux:8`
Red Hat	Red Hat Enterprise Linux 9	-	`cpe:/o:redhat:enterprise_linux:9`
Red Hat	Red Hat Hardened Images	-	`cpe:/a:redhat:hummingbird:1`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`

II. Public POCs for CVE-2026-74860

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-74860

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-74860 (9)

🔗 RHSA-2026:72470 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:64463 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71641 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:79357 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71586 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71585 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:82939 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72476 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72475 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT

Other References for CVE-2026-74860 (1)

https://access.redhat.com/security/cve/CVE-2026-74860 vdb-entry x_refsource_REDHAT

https://www.cve.org/CVERecord?id=CVE-2026-74860

Same Patch Batch · Red Hat · 2026-09-08 · 7 CVEs total

CVE-2026-78234	9.9 CRITICAL	Hawtio-operator: hawtio-operator: service-ca signing oracle allows arbitrary-cn certificat
CVE-2026-77968	8.2 HIGH	Hawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serv
CVE-2026-76561	7.2 HIGH	Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile con
CVE-2026-74859	6.8 MEDIUM	Gnome-tweaks: path traversal in theme installer
CVE-2026-18090	6.1 MEDIUM	Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block
CVE-2026-86564	3.3 LOW	Dpdk: dpdk: missing length validation before reading command_data in virtio-net control qu

IV. Related Vulnerabilities

Same product: Red Hat Enterprise Linux 10

Same vendor: Red Hat

Same weakness: CWE-763