CVE-2026-11979: Stack-Based Buffer Overflow in libxml2

CSIRTS triage

What

Stack-based buffer overflow in libxml2.

Who is affected

Users of libxml2 are affected.

Urgency

Remediation is unknown due to lack of severity information.

Action

Monitor for updates regarding this vulnerability.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

Microsoft Security Response Center (INTL · vendor-psirt · site)

Severity

unknown

Published

2026-06-09

Exploitation

Not in CISA KEV at last sync

Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11979

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-119790.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• low[UPDATE] [low] libxml2: Vulnerability allows Denial of Servicecert-bund
• highCVE-2026-11979: libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when …nvd

Recent advisories for Stack-Based Buffer Overflow

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• highCVE-2026-80186: A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stac…nvd · 2026-08-25
• highCVE-2026-48417: Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could re…nvd · 2026-08-25
• highCVE-2026-68960: A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager…nvd · 2026-08-25
• criticalCVE-2026-76071: Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability t…nvd · 2026-08-24
• criticalCVE-2026-76070: Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability t…nvd · 2026-08-24
• unknownCVE-2026-17250: A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-…nvd · 2026-08-21

More from Microsoft Security Response Center

• lowCVE-2026-14673: PostgreSQL amcheck does not clear untrusted search path2026-08-11
• criticalCVE-2026-69836: Microsoft Entra ID Remote Code Execution Vulnerability2026-08-11
• mediumCVE-2026-53792: rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block2026-08-11
• highCVE-2026-70347: Windows Installer Elevation of Privilege Vulnerability2026-08-11
• highCVE-2026-64909: Microsoft Office Remote Code Execution Vulnerability2026-08-11