| CVE-2026-93536 |
A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server…
|
5.3
Medium
|
Oct 28, 2026 |
| CVE-2026-93524 |
A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by…
|
6.9
Medium
|
Oct 28, 2026 |
| CVE-2026-93523 |
A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server…
|
7.8
High
|
Oct 28, 2026 |
| CVE-2026-93522 |
X.Org Server Glamor CopyArea Heap Buffer Overflow
|
7.8
High
|
Oct 28, 2026 |
| CVE-2026-93521 |
A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14…
|
7.8
High
|
Oct 28, 2026 |
| CVE-2026-93520 |
A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org…
|
7.8
High
|
Oct 28, 2026 |
| CVE-2026-93519 |
X.Org Server XFixes Pointer Barrier Event List Buffer Overflow
|
7.8
High
|
Oct 28, 2026 |
| CVE-2026-93518 |
X.Org Server XKB ResizeKeyType Numeric Truncation
|
7.8
High
|
Oct 28, 2026 |
| CVE-2026-93516 |
A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server…
|
5.5
Medium
|
Oct 28, 2026 |
| CVE-2026-93515 |
A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14…
|
6.8
Medium
|
Oct 28, 2026 |
| CVE-2026-88812 |
X.Org Server XKB SetGeometry TextDoodad Double Free
|
7.8
High
|
Oct 27, 2026 |
| CVE-2026-56000 |
Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland…
|
9.0
Critical
|
Jul 8, 2026 |