ThreatCluster

Denial of Service Vulnerabilities in Libvirt Identified

First seen 18 Feb 2026, 15:24 UTC Api.Msrc.Microsoft 41

Article Content

Browse articles
ThreatCluster

Two vulnerabilities affecting Libvirt have been reported. CVE-2025-12748, published on November 11, 2025, involves a denial of service due to issues in XML parsing, while CVE-2023-3750, published on July 24, 2023, relates to improper locking in the virstoragepoolobjlistsearch function, which may also lead to denial of service.

Timeline

2023-07-24
CVE-2023-3750 published
2025-11-06
First public PoC for CVE-2025-12748
2025-11-11
CVE-2025-12748 published
2026-02-18
Information published about both vulnerabilities