CVE-2016-4658
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other produ
CVSS
9.8
Critical
EPSS
8.6%
p95
KEV
—
Exploit Today
29
0-100
Published: Sep 25, 2016 · Last modified: Oct 14, 2026 · CWE-119
8.6%EPSS · 30 days8.6%
2026-10-012026-10-28
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html
- www.securityfocus.comhttp://www.securityfocus.com/bid/93054
- www.securitytracker.comhttp://www.securitytracker.com/id/1036858
- www.securitytracker.comhttp://www.securitytracker.com/id/1038623
- git.gnome.orghttps://git.gnome.org/browse/libxml2/commit/?id=c1d1f7121194036608bf555f08d3062a36fd344b
- security.gentoo.orghttps://security.gentoo.org/glsa/201701-37
- support.apple.comhttps://support.apple.com/HT207141
- support.apple.comhttps://support.apple.com/HT207142
- support.apple.comhttps://support.apple.com/HT207143
- support.apple.comhttps://support.apple.com/HT207170
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html
- www.securityfocus.comhttp://www.securityfocus.com/bid/93054
- www.securitytracker.comhttp://www.securitytracker.com/id/1036858
- www.securitytracker.comhttp://www.securitytracker.com/id/1038623
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-76030——
———Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)10hCVE-2026-76029——
———Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)10hCVE-2026-76027——
———Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)10hCVE-2026-76026——
———Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)10hCVE-2026-76024——
———Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)10hCVE-2026-119267——
———Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)10h