CVE-2016-4658
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other produ
CVSS
9.8
Crítico
EPSS
8.6%
p95
KEV
—
Exploit Today
29
0-100
Publicado: 25 sept 2016 · Última mod.: 14 oct 2026 · CWE-119
8.6%EPSS · 30 días8.6%
2026-10-012026-10-29
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html
- www.securityfocus.comhttp://www.securityfocus.com/bid/93054
- www.securitytracker.comhttp://www.securitytracker.com/id/1036858
- www.securitytracker.comhttp://www.securitytracker.com/id/1038623
- git.gnome.orghttps://git.gnome.org/browse/libxml2/commit/?id=c1d1f7121194036608bf555f08d3062a36fd344b
- security.gentoo.orghttps://security.gentoo.org/glsa/201701-37
- support.apple.comhttps://support.apple.com/HT207141
- support.apple.comhttps://support.apple.com/HT207142
- support.apple.comhttps://support.apple.com/HT207143
- support.apple.comhttps://support.apple.com/HT207170
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html
- lists.apple.comhttp://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html
- www.securityfocus.comhttp://www.securityfocus.com/bid/93054
- www.securitytracker.comhttp://www.securitytracker.com/id/1036858
- www.securitytracker.comhttp://www.securitytracker.com/id/1038623
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-76030——
——0Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)11hCVE-2026-76029——
——0Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)11hCVE-2026-76027——
——0Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)11hCVE-2026-76026——
——0Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)11hCVE-2026-76024——
——0Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)11hCVE-2026-119267——
——0Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)11h