Pro-Linux.De
Multiple CVEs Affecting XML Libraries Published on February 18, 2026
First seen 18 Feb 2026, 10:13 UTC
•
•41.1
Export
Article Content
Browse articles
Two new Common Vulnerabilities and Exposures (CVEs) were published on February 18, 2026. CVE-2022-49043 affects libxml2 versions before 2.11.0, introducing a use-after-free vulnerability, while CVE-2024-28757 in libexpat versions up to 2.6.1 allows for XML Entity Expansion attacks when using external parsers. Both vulnerabilities could impact applications relying on these libraries for XML processing.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2024-03-10
CVE-2024-28757 published
2025-01-26
CVE-2022-49043 published
2026-02-18
CVE-2022-49043 and CVE-2024-28757 information published
More articles in this cluster
Continue Reading
Critical Command Injection and DoS Vulnerabilities in openSUSE pcp
Critical DoS Vulnerabilities in openSUSE xorg-x11-server Addressed
Critical Auth Bypass Vulnerability in SUSE Elemental Systems (CVE-2026-33186)
Critical Vulnerabilities in SUSE BIND Require Immediate Attention
Critical RefluXFS Flaw Exposes Millions of Linux Systems to Root Takeover
Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros