| CVE-2026-93536 |
A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server…
|
5.3
Medium
|
Oct 28, 2026 |
| CVE-2026-93524 |
A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by…
|
6.9
Medium
|
Oct 28, 2026 |
| CVE-2026-93523 |
A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server…
|
7.8
High
|
Oct 28, 2026 |
| CVE-2026-93522 |
X.Org Server Glamor CopyArea Heap Buffer Overflow
|
7.8
High
|
Oct 28, 2026 |
| CVE-2026-93521 |
A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14…
|
7.8
High
|
Oct 28, 2026 |
| CVE-2026-93520 |
A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org…
|
7.8
High
|
Oct 28, 2026 |
| CVE-2026-93518 |
X.Org Server XKB ResizeKeyType Numeric Truncation
|
7.8
High
|
Oct 28, 2026 |
| CVE-2026-93517 |
X.Org Server GLX RenderLarge Heap Buffer Overflow
|
8.5
High
|
Oct 28, 2026 |
| CVE-2026-93516 |
A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server…
|
5.5
Medium
|
Oct 28, 2026 |
| CVE-2026-93515 |
A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14…
|
6.8
Medium
|
Oct 28, 2026 |
| CVE-2026-88812 |
X.Org Server XKB SetGeometry TextDoodad Double Free
|
7.8
High
|
Oct 27, 2026 |
| CVE-2026-55999 |
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland…
|
8.5
High
|
Jul 8, 2026 |
| CVE-2026-56000 |
Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland…
|
9.0
Critical
|
Jul 8, 2026 |
| CVE-2025-62229 |
Xorg: xmayland: use-after-free in xpresentnotify structure creation
|
7.3
High
|
Oct 30, 2025 |
| CVE-2025-62230 |
Xorg: xwayland: use-after-free in xkb client resource removal
|
7.3
High
|
Oct 30, 2025 |
| CVE-2025-62231 |
Xorg: xmayland: value overflow in xkbsetcompatmap()
|
7.3
High
|
Oct 30, 2025 |
| CVE-2025-49180 |
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
|
7.8
High
|
Jun 17, 2025 |
| CVE-2025-49179 |
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension
|
7.3
High
|
Jun 17, 2025 |
| CVE-2025-49178 |
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
|
5.5
Medium
|
Jun 17, 2025 |
| CVE-2025-49177 |
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode
|
6.1
Medium
|
Jun 17, 2025 |
| CVE-2025-49176 |
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
|
7.3
High
|
Jun 17, 2025 |
| CVE-2025-49175 |
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
|
6.1
Medium
|
Jun 17, 2025 |