Every CVE Search/ Get API key

CVE-2026-50265

A flaw was found in libinput. A local attacker with access to /dev/uinput can inject arbitrary...

7.0 HighRejected

This CVE ID was assigned as a duplicate of CVE-2026-50292

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

What each source reports

GitHub Advisories Score usedGHSA-h66j-7rgr-pmgx 7.0

A flaw was found in libinput. A local attacker with access to /dev/uinput can inject arbitrary...

A flaw was found in libinput. A local attacker with access to /dev/uinput can inject arbitrary udev properties through the libinput-device-group helper. This injection can lead to root code execution, for example, by exploiting REMOVE_CMD properties that are executed when a device is removed. This vulnerability allows an attacker to gain elevated privileges on the system.

Record
GHSA-h66j-7rgr-pmgx
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
CVE List No score

This CVE ID was assigned as a duplicate of CVE-2026-50292

Record
CVE-2026-50265
Updated
2026-11-02
EUVDEUVD-2026-34795 7.0

This CVE ID was assigned as a duplicate of CVE-2026-50292

Record
EUVD-2026-34795
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
NVD No score

Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292

Record
CVE-2026-50265
Updated
2026-11-02
OSVUBUNTU-CVE-2026-50265 7.0

Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292

Record
UBUNTU-CVE-2026-50265
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2026:21091-1 No score

Security update for libinput

This update for libinput fixes the following issues

  • CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
Record
openSUSE-SU-2026:21091-1
Updated
2026-11-02
Show 5 moreShow less
OSVSUSE-SU-2026:22165-1 No score

Security update for libinput

This update for libinput fixes the following issues

  • CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
Record
SUSE-SU-2026:22165-1
Updated
2026-11-02
OSVSUSE-SU-2026:2523-1 No score

Security update for libinput

This update for libinput fixes the following issues

  • CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
Record
SUSE-SU-2026:2523-1
Updated
2026-11-02
OSVSUSE-SU-2026:2524-1 No score

Security update for libinput

This update for libinput fixes the following issues

  • CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
Record
SUSE-SU-2026:2524-1
Updated
2026-11-02
OSVSUSE-SU-2026:2529-1 No score

Security update for libinput

This update for libinput fixes the following issues

  • CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
Record
SUSE-SU-2026:2529-1
Updated
2026-11-02
OSVSUSE-SU-2026:2530-1 No score

Security update for libinput

This update for libinput fixes the following issues

  • CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation (bsc#1267852).
Record
SUSE-SU-2026:2530-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
libinput
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 1.28.1-160000.3.1
1.28.1-160000.3.1
libinput
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 1.28.1-160000.3.1
1.28.1-160000.3.1
libinput
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 1.21.0-150500.3.3.1
1.21.0-150500.3.3.1
libinput
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 1.21.0-150500.3.3.1
1.21.0-150500.3.3.1
libinput
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 1.21.0-150500.3.3.1
1.21.0-150500.3.3.1
libinput
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 1.21.0-150500.3.3.1
1.21.0-150500.3.3.1
libinput
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 1.27.1-150700.3.3.1
1.27.1-150700.3.3.1
libinput
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 2 CVEs
 before 1.25.0-150600.3.3.1
1.25.0-150600.3.3.1
libinput
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 2 CVEs
 before 1.25.0-150600.3.3.1
1.25.0-150600.3.3.1
libinput
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 1.19.4-150400.3.3.1
1.19.4-150400.3.3.1
Show 5 moreShow less
Affected packages
PackageAffectedFixed
libinput
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.19.4-150400.3.3.1
1.19.4-150400.3.3.1
libinput
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.19.4-150400.3.3.1
1.19.4-150400.3.3.1
libinput
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 1.19.4-150400.3.3.1
1.19.4-150400.3.3.1
libinput
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 1.28.1-160000.3.1
1.28.1-160000.3.1
libinput-extra
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 1.28.1-160000.3.1
1.28.1-160000.3.1

History

History
RecordedChangedSources
affected, facts
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-50265 has been rejected by its source and should not be treated as a live vulnerability, published June 5, 2026.

References

Show 10 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open