onyx

onyx --cves cve-2021-3537

CVE-2021-3537

MEDOpenJDK
score
<0.1
cvss
5.9
epss
3.6%
published
2021-05-14
kev added
—
first seen

libxml2 before 2.9.11 contains a NULL dereference caused by not propagating errors during parsing of XML mixed content, letting attackers crash the application, exploit requires parsing untrusted XML in recovery mode.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2021-05-14 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 3.5%2026-09-23: epss 3.5%2026-09-24: epss 3.5%2026-09-25: epss 3.5%2026-09-26: epss 3.5%2026-09-27: epss 3.5%2026-09-28: epss 3.5%2026-09-29: epss 3.5%2026-09-30: epss 3.5%2026-10-01: epss 3.5%2026-10-02: epss 3.5%2026-10-03: epss 3.5%2026-10-04: epss 3.5%2026-10-05: epss 3.5%2026-10-06: epss 3.5%2026-10-07: epss 3.5%2026-10-08: epss 3.5%2026-10-09: epss 3.5%2026-10-10: epss 3.5%2026-10-11: epss 3.5%2026-10-12: epss 3.5%2026-10-13: epss 3.5%2026-10-14: epss 3.6%2026-10-15: epss 3.6%2026-10-16: epss 3.6%2026-10-18: epss 3.6%2026-10-19: epss 3.6%2026-10-20: epss 3.6%2026-10-21: epss 3.6%3.6%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-476

References 9