Every CVE Search/ Get API key

CVE-2026-56000

xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

9.0 CriticalFix available

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.31%Up 0.1 points since Jul 8, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.0

xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Record
CVE-2026-56000
CVSS 4.0
9.0 CriticalCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2026-42202 9.0

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Record
EUVD-2026-42202
CVSS 4.0
9.0 CriticalCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-4gcc-rqqq-58jp 9.0

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before...

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Record
GHSA-4gcc-rqqq-58jp
CVSS 4.0
9.0 CriticalCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 9.0

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Record
CVE-2026-56000
CVSS 4.0
9.0 CriticalCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVALPINE-CVE-2026-56000 7.8

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Record
ALPINE-CVE-2026-56000
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2026-56000 7.8
Record
BELL-CVE-2026-56000
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 28 moreShow less
OSV 9.0

xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Record
CVE-2026-56000
CVSS 4.0
9.0 CriticalCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weakness
CWE-416
Updated
2026-11-02
OSVDEBIAN-CVE-2026-56000 7.8

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Record
DEBIAN-CVE-2026-56000
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:38489 7.5

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Record
RHSA-2026:38489
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:38490 7.5

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Record
RHSA-2026:38490
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:50100 7.5

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Record
RHSA-2026:50100
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:50718 7.5

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Record
RHSA-2026:50718
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:52398 7.5

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Record
RHSA-2026:52398
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:38489 7.5

Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

  • xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)

  • X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:38489
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:38490 7.5

Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

  • xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)

  • X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:38490
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-56000 9.0

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Record
UBUNTU-CVE-2026-56000
CVSS 4.0
9.0 CriticalCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:38489 No score

Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

  • xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)
  • X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:38489
Updated
2026-11-02
OSVALSA-2026:38490 No score

Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

  • xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)
  • X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:38490
Updated
2026-11-02
OSVAZL-92072 No score

CVE-2026-56000 affecting package xorg-x11-server 1.20.10-6

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Record
AZL-92072
Updated
2026-11-05
OSVAZL-92265 No score

CVE-2026-56000 affecting package xorg-x11-server-Xwayland for versions less than 24.1.13-1

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Record
AZL-92265
Updated
2026-11-02
OSVCLSA-2026-1784219693 No score

xorg-x11-server-Xwayland: Fix of 2 CVEs

  • CVE fix for: CVE-2026-55999, CVE-2026-56000
Record
CLSA-2026-1784219693
Updated
2026-11-02
OSVMGASA-2026-0303 No score

Updated x11-server x11-server-xwayland tigervnc packages fix security vulnerabilities

The updated packages fix security vulnerabilities: glamor Font Atlas Heap Buffer Overflow. (CVE-2026-55999) GLX contextTags Use-After-Free in CommonMakeCurrent(). (CVE-2026-56000)

Record
MGASA-2026-0303
Updated
2026-11-02
OSVopenSUSE-SU-2026:11227-1 No score

xwayland-24.1.12-1.1 on GA media

These are all security issues fixed in the xwayland-24.1.12-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11227-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11244-1 No score

xorg-x11-server-21.1.21-8.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.21-8.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11244-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21273-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues

  • CVE-2026-55999: missing bounds check in glamor_font_get can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893).
  • CVE-2026-56000: improper memory management in CommonMakeCurrent can lead to a heap use-after-free when an interaction with a malicious client creating GLX contexts happens (bsc#1268894).
Record
openSUSE-SU-2026:21273-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21283-1 No score

Security update for xwayland

This update for xwayland fixes the following issues

  • CVE-2026-55999: missing bounds check in glamor_font_get can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893).
  • CVE-2026-56000: improper memory management in CommonMakeCurrent can lead to a heap use-after-free when an interaction with a malicious client creating GLX contexts happens (bsc#1268894).
Record
openSUSE-SU-2026:21283-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-56000 No score

CVE-2026-56000 in xorg-server - Patched by Root

Root has patched CVE-2026-56000 in the xorg-server package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-56000
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-56000 No score

CVE-2026-56000 in xorg-server - Patched by Root

Root has patched CVE-2026-56000 in the xorg-server package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-56000
Updated
2026-11-02
OSVSUSE-SU-2026:22617-1 No score

Security update for xwayland

This update for xwayland fixes the following issues

  • CVE-2026-55999: missing bounds check in glamor_font_get can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893).
  • CVE-2026-56000: improper memory management in CommonMakeCurrent can lead to a heap use-after-free when an interaction with a malicious client creating GLX contexts happens (bsc#1268894).
Record
SUSE-SU-2026:22617-1
Updated
2026-11-02
OSVSUSE-SU-2026:2786-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues

  • CVE-2026-55999: missing bounds check in glamor_font_get can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893).
  • CVE-2026-56000: improper memory management in CommonMakeCurrent can lead to a heap use-after-free when an interaction with a malicious client creating GLX contexts happens (bsc#1268894).
Record
SUSE-SU-2026:2786-1
Updated
2026-11-02
OSVSUSE-SU-2026:2787-1 No score

Security update for xwayland

This update for xwayland fixes the following issues

  • CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893).
  • CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).
Record
SUSE-SU-2026:2787-1
Updated
2026-11-02
OSVSUSE-SU-2026:2788-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues

  • CVE-2026-55999: missing bounds check in glamor_font_get can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893).
  • CVE-2026-56000: improper memory management in CommonMakeCurrent can lead to a heap use-after-free when an interaction with a malicious client creating GLX contexts happens (bsc#1268894).
Record
SUSE-SU-2026:2788-1
Updated
2026-11-02
OSVSUSE-SU-2026:2789-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues

  • CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893).
  • CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).
Record
SUSE-SU-2026:2789-1
Updated
2026-11-02
OSVSUSE-SU-2026:2791-1 No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues

  • CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893).
  • CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).
Record
SUSE-SU-2026:2791-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xorg-server
Alpine:v3.24
 before 21.1.24-r0
21.1.24-r0
xwayland
Alpine:v3.24
 before 24.1.13-r0
24.1.13-r0
xorg-x11-server-Xwayland
AlmaLinux:10
From an advisory covering 2 CVEs
 before 24.1.9-4.el10_2.3
24.1.9-4.el10_2.3
xorg-x11-server-Xwayland-devel
AlmaLinux:10
From an advisory covering 2 CVEs
 before 24.1.9-4.el10_2.3
24.1.9-4.el10_2.3
xorg-x11-server-Xwayland
AlmaLinux:9
From an advisory covering 2 CVEs
 before 24.1.9-4.el9_8.3
24.1.9-4.el9_8.3
xorg-x11-server-Xwayland-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 24.1.9-4.el9_8.3
24.1.9-4.el9_8.3
xorg-x11-server
Azure Linux:3
 through 1.20.10-6 None known
xorg-x11-server-Xwayland
Azure Linux:3
 before 24.1.13-1
24.1.13-1
xorg-server
Alpaquita:23
 21.1.4-r1 up to 21.1.24-r0
21.1.24-r0
xorg-server
Alpaquita:25
 21.1.16-r0 up to 21.1.24-r0
21.1.24-r0
Show 78 moreShow less
Affected packages
PackageAffectedFixed
xorg-server
Alpaquita:stream
 21.1.4-r1 up to 21.1.24-r0
21.1.24-r0
xorg-x11-server-Xwayland
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 23.2.7-5.el9_6.tuxcare.els3
23.2.7-5.el9_6.tuxcare.els3
xorg-x11-server-Xwayland-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 23.2.7-5.el9_6.tuxcare.els3
23.2.7-5.el9_6.tuxcare.els3
xorg-server
Debian:12
 All versions, plus listed versions
2:21.1.10-12:21.1.11-12:21.1.11-22:21.1.11-32:21.1.12-1
Show 37 moreShow less
2:21.1.13-12:21.1.13-22:21.1.13-32:21.1.13-3.12:21.1.14-12:21.1.14-22:21.1.15-12:21.1.15-22:21.1.15-32:21.1.16-12:21.1.16-1.12:21.1.16-1.22:21.1.16-1.32:21.1.18-12:21.1.18-22:21.1.20-12:21.1.21-12:21.1.22-12:21.1.23-12:21.1.24-12:21.1.7-32:21.1.7-3+deb12u12:21.1.7-3+deb12u102:21.1.7-3+deb12u112:21.1.7-3+deb12u122:21.1.7-3+deb12u132:21.1.7-3+deb12u22:21.1.7-3+deb12u32:21.1.7-3+deb12u42:21.1.7-3+deb12u52:21.1.7-3+deb12u62:21.1.7-3+deb12u72:21.1.7-3+deb12u82:21.1.7-3+deb12u92:21.1.8-12:21.1.9-12:21.1.9-1+hurd.1
 None known
xorg-server
Debian:13
 before 2:21.1.16-1.3+deb13u4, plus listed versions
2:21.1.16-1.32:21.1.16-1.3+deb13u12:21.1.16-1.3+deb13u22:21.1.16-1.3+deb13u3
2:21.1.16-1.3+deb13u4
xorg-server
Debian:14
 before 2:21.1.24-1, plus listed versions
2:21.1.16-1.32:21.1.18-12:21.1.18-22:21.1.20-12:21.1.21-12:21.1.22-12:21.1.23-1
2:21.1.24-1
xwayland
Debian:12
 All versions, plus listed versions
2:22.1.9-12:23.1.0-12:23.1.1-12:23.2.0-12:23.2.1-1
Show 19 moreShow less
2:23.2.2-12:23.2.3-12:23.2.4-12:23.2.6-12:24.0.99.901-12:24.1.0-12:24.1.10-12:24.1.11-12:24.1.12-12:24.1.13-12:24.1.2-12:24.1.3-12:24.1.4-12:24.1.4-22:24.1.4-32:24.1.5-12:24.1.6-12:24.1.8-12:24.1.9-1
 None known
xwayland
Debian:13
 All versions, plus listed versions
2:24.1.10-12:24.1.11-12:24.1.12-12:24.1.13-12:24.1.6-12:24.1.8-12:24.1.9-1
 None known
xwayland
Debian:14
 before 2:24.1.13-1, plus listed versions
2:24.1.10-12:24.1.11-12:24.1.12-12:24.1.6-12:24.1.8-12:24.1.9-1
2:24.1.13-1
x11-server
Mageia:10
From an advisory covering 2 CVEs
 before 21.1.24-1.mga10
21.1.24-1.mga10
x11-server-xwayland
Mageia:10
From an advisory covering 2 CVEs
 before 24.1.13-1.mga10
24.1.13-1.mga10
tigervnc
Mageia:10
From an advisory covering 2 CVEs
 before 1.15.0-7.1.mga10
1.15.0-7.1.mga10
xorg-x11-server-Xwayland
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el10_2.3
0:24.1.9-4.el10_2.3
xorg-x11-server-Xwayland-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el10_2.3
0:24.1.9-4.el10_2.3
xorg-x11-server-Xwayland-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el10_2.3
0:24.1.9-4.el10_2.3
xorg-x11-server-Xwayland-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el10_2.3
0:24.1.9-4.el10_2.3
xorg-x11-server-Xwayland
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el9_8.3
0:24.1.9-4.el9_8.3
xorg-x11-server-Xwayland-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el9_8.3
0:24.1.9-4.el9_8.3
xorg-x11-server-Xwayland-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el9_8.3
0:24.1.9-4.el9_8.3
xorg-x11-server-Xwayland
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el9_8.3
0:24.1.9-4.el9_8.3
xorg-x11-server-Xwayland-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el9_8.3
0:24.1.9-4.el9_8.3
xorg-x11-server-Xwayland-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el9_8.3
0:24.1.9-4.el9_8.3
xorg-x11-server-Xwayland-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el9_8.3
0:24.1.9-4.el9_8.3
xorg-x11-server-Xwayland
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:24.1.5-6.el10_0.2
0:24.1.5-6.el10_0.2
xorg-x11-server-Xwayland-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:24.1.5-6.el10_0.2
0:24.1.5-6.el10_0.2
xorg-x11-server-Xwayland-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:24.1.5-6.el10_0.2
0:24.1.5-6.el10_0.2
xorg-x11-server-Xwayland-devel
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:24.1.5-6.el10_0.2
0:24.1.5-6.el10_0.2
xorg-x11-server-Xwayland
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:23.2.7-6.el9_6.3
0:23.2.7-6.el9_6.3
xorg-x11-server-Xwayland-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:23.2.7-6.el9_6.3
0:23.2.7-6.el9_6.3
xorg-x11-server-Xwayland-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:23.2.7-6.el9_6.3
0:23.2.7-6.el9_6.3
xorg-x11-server-Xwayland
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
 before 0:23.2.7-6.el9_6.3
0:23.2.7-6.el9_6.3
xorg-x11-server-Xwayland-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
 before 0:23.2.7-6.el9_6.3
0:23.2.7-6.el9_6.3
xorg-x11-server-Xwayland-debugsource
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
 before 0:23.2.7-6.el9_6.3
0:23.2.7-6.el9_6.3
xorg-x11-server-Xwayland-devel
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
 before 0:23.2.7-6.el9_6.3
0:23.2.7-6.el9_6.3
xorg-x11-server-Xwayland
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
 before 0:22.1.9-8.el9_4.3
0:22.1.9-8.el9_4.3
xorg-x11-server-Xwayland-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
 before 0:22.1.9-8.el9_4.3
0:22.1.9-8.el9_4.3
xorg-x11-server-Xwayland-debugsource
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
 before 0:22.1.9-8.el9_4.3
0:22.1.9-8.el9_4.3
xorg-x11-server-Xwayland
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el10_2.3
0:24.1.9-4.el10_2.3
xorg-x11-server-Xwayland
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:24.1.9-4.el9_8.3
0:24.1.9-4.el9_8.3
xorg-server
Root:Debian:11
 before 2:1.20.11-1+deb11u18.aikido.13
2:1.20.11-1+deb11u18.aikido.13
rootio-xorg-server
Root:Debian:11
 before 2:1.20.11-1+deb11u18.aikido.13
2:1.20.11-1+deb11u18.aikido.13
xorg-server
Root:Debian:12
 before 2:21.1.7-3+deb12u13.aikido.9
2:21.1.7-3+deb12u13.aikido.9
rootio-xorg-server
Root:Debian:12
 before 2:21.1.7-3+deb12u13.aikido.9
2:21.1.7-3+deb12u13.aikido.9
xwayland
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 24.1.6-160000.6.1
24.1.6-160000.6.1
xwayland
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 24.1.6-160000.6.1
24.1.6-160000.6.1
xorg-x11-server
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 2 CVEs
 before 21.1.11-150600.5.31.1
21.1.11-150600.5.31.1
xorg-x11-server
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 2 CVEs
 before 21.1.11-150600.5.31.1
21.1.11-150600.5.31.1
xwayland
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 2 CVEs
 before 24.1.5-150700.3.22.1
24.1.5-150700.3.22.1
xorg-x11-server
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 21.1.15-150700.5.22.1
21.1.15-150700.5.22.1
xorg-x11-server
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 2 CVEs
 before 21.1.15-150700.5.22.1
21.1.15-150700.5.22.1
xorg-x11-server
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 1.20.3-150400.38.74.1
1.20.3-150400.38.74.1
xorg-x11-server
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.20.3-150400.38.74.1
1.20.3-150400.38.74.1
xorg-x11-server
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.20.3-150400.38.74.1
1.20.3-150400.38.74.1
xorg-x11-server
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 1.20.3-150400.38.74.1
1.20.3-150400.38.74.1
xorg-x11-server
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 21.1.4-150500.7.52.1
21.1.4-150500.7.52.1
xorg-x11-server
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 21.1.4-150500.7.52.1
21.1.4-150500.7.52.1
xorg-x11-server
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 21.1.4-150500.7.52.1
21.1.4-150500.7.52.1
xorg-x11-server
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 21.1.4-150500.7.52.1
21.1.4-150500.7.52.1
xorg-server
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2:1.14.3-3ubuntu22:1.14.3-3ubuntu32:1.14.3-3ubuntu42:1.14.3-5ubuntu12:1.14.4-1ubuntu1
Show 30 moreShow less
2:1.14.4-1ubuntu22:1.14.4.901-0ubuntu22:1.14.5-1ubuntu22:1.14.5-1ubuntu42:1.15.0-1ubuntu12:1.15.0-1ubuntu22:1.15.0-1ubuntu32:1.15.0-1ubuntu42:1.15.0-1ubuntu62:1.15.0-1ubuntu72:1.15.1-0ubuntu12:1.15.1-0ubuntu22:1.15.1-0ubuntu2.12:1.15.1-0ubuntu2.42:1.15.1-0ubuntu2.52:1.15.1-0ubuntu2.62:1.15.1-0ubuntu2.72:1.15.1-0ubuntu2.92:1.15.1-0ubuntu2.102:1.15.1-0ubuntu2.112:1.15.1-0ubuntu2.11+esm22:1.15.1-0ubuntu2.11+esm32:1.15.1-0ubuntu2.11+esm42:1.15.1-0ubuntu2.11+esm52:1.15.1-0ubuntu2.11+esm62:1.15.1-0ubuntu2.11+esm72:1.15.1-0ubuntu2.11+esm82:1.15.1-0ubuntu2.11+esm92:1.15.1-0ubuntu2.11+esm112:1.15.1-0ubuntu2.11+esm12
 None known
xorg-server
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:1.17.2-1ubuntu92:1.17.2-1ubuntu102:1.17.3-2ubuntu12:1.17.3-2ubuntu22:1.17.3-2ubuntu3
Show 33 moreShow less
2:1.17.3-2ubuntu42:1.18.1-1ubuntu32:1.18.1-1ubuntu42:1.18.3-1ubuntu12:1.18.3-1ubuntu22:1.18.3-1ubuntu2.22:1.18.3-1ubuntu2.32:1.18.4-0ubuntu0.12:1.18.4-0ubuntu0.22:1.18.4-0ubuntu0.32:1.18.4-0ubuntu0.42:1.18.4-0ubuntu0.62:1.18.4-0ubuntu0.72:1.18.4-0ubuntu0.82:1.18.4-0ubuntu0.92:1.18.4-0ubuntu0.102:1.18.4-0ubuntu0.112:1.18.4-0ubuntu0.122:1.18.4-0ubuntu0.12+esm12:1.18.4-0ubuntu0.12+esm22:1.18.4-0ubuntu0.12+esm42:1.18.4-0ubuntu0.12+esm52:1.18.4-0ubuntu0.12+esm62:1.18.4-0ubuntu0.12+esm82:1.18.4-0ubuntu0.12+esm92:1.18.4-0ubuntu0.12+esm102:1.18.4-0ubuntu0.12+esm122:1.18.4-0ubuntu0.12+esm132:1.18.4-0ubuntu0.12+esm142:1.18.4-0ubuntu0.12+esm152:1.18.4-0ubuntu0.12+esm162:1.18.4-0ubuntu0.12+esm172:1.18.4-0ubuntu0.12+esm18
 None known
xorg-server-hwe-16.04
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:1.18.4-1ubuntu6.1~16.04.12:1.18.4-1ubuntu6.1~16.04.22:1.19.3-1ubuntu1~16.04.22:1.19.3-1ubuntu1~16.04.32:1.19.3-1ubuntu1~16.04.4
Show 17 moreShow less
2:1.19.5-0ubuntu2~16.04.12:1.19.6-1ubuntu4~16.04.12:1.19.6-1ubuntu4.1~16.04.12:1.19.6-1ubuntu4.1~16.04.22:1.19.6-1ubuntu4.1~16.04.32:1.19.6-1ubuntu4.1~16.04.42:1.19.6-1ubuntu4.1~16.04.52:1.19.6-1ubuntu4.1~16.04.62:1.19.6-1ubuntu4.1~16.04.6+esm12:1.19.6-1ubuntu4.1~16.04.6+esm32:1.19.6-1ubuntu4.1~16.04.6+esm42:1.19.6-1ubuntu4.1~16.04.6+esm52:1.19.6-1ubuntu4.1~16.04.6+esm62:1.19.6-1ubuntu4.1~16.04.6+esm72:1.19.6-1ubuntu4.1~16.04.6+esm82:1.19.6-1ubuntu4.1~16.04.6+esm92:1.19.6-1ubuntu4.1~16.04.6+esm10
 None known
xorg-server
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:1.19.5-0ubuntu22:1.19.6-1ubuntu12:1.19.6-1ubuntu22:1.19.6-1ubuntu32:1.19.6-1ubuntu4
Show 26 moreShow less
2:1.19.6-1ubuntu4.12:1.19.6-1ubuntu4.22:1.19.6-1ubuntu4.32:1.19.6-1ubuntu4.42:1.19.6-1ubuntu4.52:1.19.6-1ubuntu4.62:1.19.6-1ubuntu4.72:1.19.6-1ubuntu4.82:1.19.6-1ubuntu4.92:1.19.6-1ubuntu4.102:1.19.6-1ubuntu4.112:1.19.6-1ubuntu4.122:1.19.6-1ubuntu4.132:1.19.6-1ubuntu4.142:1.19.6-1ubuntu4.152:1.19.6-1ubuntu4.15+esm12:1.19.6-1ubuntu4.15+esm32:1.19.6-1ubuntu4.15+esm42:1.19.6-1ubuntu4.15+esm52:1.19.6-1ubuntu4.15+esm72:1.19.6-1ubuntu4.15+esm82:1.19.6-1ubuntu4.15+esm92:1.19.6-1ubuntu4.15+esm102:1.19.6-1ubuntu4.15+esm112:1.19.6-1ubuntu4.15+esm122:1.19.6-1ubuntu4.15+esm13
 None known
xorg-server-hwe-18.04
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:1.20.1-3ubuntu2.1~18.04.12:1.20.4-1ubuntu3~18.04.12:1.20.5+git20191008-0ubuntu1~18.04.12:1.20.8-2ubuntu2.1~18.04.12:1.20.8-2ubuntu2.2~18.04.1
Show 15 moreShow less
2:1.20.8-2ubuntu2.2~18.04.22:1.20.8-2ubuntu2.2~18.04.32:1.20.8-2ubuntu2.2~18.04.42:1.20.8-2ubuntu2.2~18.04.52:1.20.8-2ubuntu2.2~18.04.62:1.20.8-2ubuntu2.2~18.04.72:1.20.8-2ubuntu2.2~18.04.82:1.20.8-2ubuntu2.2~18.04.92:1.20.8-2ubuntu2.2~18.04.102:1.20.8-2ubuntu2.2~18.04.112:1.20.8-2ubuntu2.2~18.04.11+esm12:1.20.8-2ubuntu2.2~18.04.11+esm22:1.20.8-2ubuntu2.2~18.04.11+esm32:1.20.8-2ubuntu2.2~18.04.11+esm42:1.20.8-2ubuntu2.2~18.04.11+esm5
 None known
xorg-server
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2:1.20.5+git20191008-0ubuntu12:1.20.6-1ubuntu12:1.20.7-2ubuntu12:1.20.7-2ubuntu22:1.20.8-2ubuntu2
Show 25 moreShow less
2:1.20.8-2ubuntu2.12:1.20.8-2ubuntu2.22:1.20.8-2ubuntu2.32:1.20.8-2ubuntu2.42:1.20.8-2ubuntu2.62:1.20.9-2ubuntu1.1~20.04.12:1.20.9-2ubuntu1.2~20.04.12:1.20.9-2ubuntu1.2~20.04.22:1.20.11-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.42:1.20.13-1ubuntu1~20.04.52:1.20.13-1ubuntu1~20.04.62:1.20.13-1ubuntu1~20.04.82:1.20.13-1ubuntu1~20.04.92:1.20.13-1ubuntu1~20.04.122:1.20.13-1ubuntu1~20.04.142:1.20.13-1ubuntu1~20.04.152:1.20.13-1ubuntu1~20.04.162:1.20.13-1ubuntu1~20.04.172:1.20.13-1ubuntu1~20.04.182:1.20.13-1ubuntu1~20.04.192:1.20.13-1ubuntu1~20.04.202:1.20.13-1ubuntu1~20.04.20+esm1
 None known
xorg-server
Ubuntu:22.04:LTS
 All versions, plus listed versions
2:1.20.13-1ubuntu12:1.20.13-1ubuntu22:1.20.14-1ubuntu12:21.1.3-2ubuntu22:21.1.3-2ubuntu2.1
Show 21 moreShow less
2:21.1.3-2ubuntu2.22:21.1.3-2ubuntu2.32:21.1.3-2ubuntu2.42:21.1.3-2ubuntu2.52:21.1.3-2ubuntu2.62:21.1.3-2ubuntu2.72:21.1.3-2ubuntu2.82:21.1.3-2ubuntu2.92:21.1.4-2ubuntu1.7~22.04.12:21.1.4-2ubuntu1.7~22.04.22:21.1.4-2ubuntu1.7~22.04.52:21.1.4-2ubuntu1.7~22.04.72:21.1.4-2ubuntu1.7~22.04.82:21.1.4-2ubuntu1.7~22.04.92:21.1.4-2ubuntu1.7~22.04.102:21.1.4-2ubuntu1.7~22.04.112:21.1.4-2ubuntu1.7~22.04.122:21.1.4-2ubuntu1.7~22.04.132:21.1.4-2ubuntu1.7~22.04.142:21.1.4-2ubuntu1.7~22.04.152:21.1.4-2ubuntu1.7~22.04.16
 None known
xwayland
Ubuntu:22.04:LTS
 All versions, plus listed versions
2:21.1.2-0ubuntu12:21.1.3-12:21.1.3-1ubuntu12:21.1.4-12:22.1.0-1
Show 19 moreShow less
2:22.1.1-12:22.1.1-1ubuntu0.12:22.1.1-1ubuntu0.22:22.1.1-1ubuntu0.32:22.1.1-1ubuntu0.42:22.1.1-1ubuntu0.52:22.1.1-1ubuntu0.62:22.1.1-1ubuntu0.72:22.1.1-1ubuntu0.92:22.1.1-1ubuntu0.102:22.1.1-1ubuntu0.112:22.1.1-1ubuntu0.122:22.1.1-1ubuntu0.132:22.1.1-1ubuntu0.142:22.1.1-1ubuntu0.152:22.1.1-1ubuntu0.172:22.1.1-1ubuntu0.182:22.1.1-1ubuntu0.192:22.1.1-1ubuntu0.20
 None known
xorg-server
Ubuntu:24.04:LTS
 All versions, plus listed versions
2:21.1.7-3ubuntu22:21.1.7-3ubuntu2.12:21.1.10-1ubuntu12:21.1.11-2ubuntu12:21.1.12-1ubuntu1
Show 8 moreShow less
2:21.1.12-1ubuntu1.12:21.1.12-1ubuntu1.22:21.1.12-1ubuntu1.32:21.1.12-1ubuntu1.42:21.1.12-1ubuntu1.52:21.1.12-1ubuntu1.62:21.1.12-1ubuntu1.82:21.1.12-1ubuntu1.9
 None known
xwayland
Ubuntu:24.04:LTS
 All versions, plus listed versions
2:23.2.0-12:23.2.0-1ubuntu0.12:23.2.3-12:23.2.4-12:23.2.4-1build1
Show 10 moreShow less
2:23.2.4-1build22:23.2.4-1build32:23.2.6-12:23.2.6-1ubuntu0.12:23.2.6-1ubuntu0.22:23.2.6-1ubuntu0.42:23.2.6-1ubuntu0.52:23.2.6-1ubuntu0.62:23.2.6-1ubuntu0.72:23.2.6-1ubuntu0.8
 None known
xorg-server
Ubuntu:25.10
 All versions, plus listed versions
2:21.1.16-1ubuntu12:21.1.18-1ubuntu12:21.1.18-1ubuntu1.1
 None known
xwayland
Ubuntu:25.10
 All versions, plus listed versions
2:24.1.6-12:24.1.6-1ubuntu12:24.1.6-1ubuntu1.1
 None known
xorg-server
Ubuntu:26.10
 All versions, plus listed versions
2:21.1.22-1ubuntu12:21.1.22-1ubuntu42:21.1.24-1ubuntu1
 None known
xwayland
Ubuntu:26.10
 All versions, plus listed versions
2:24.1.10-12:24.1.12-12:24.1.13-12:24.1.14-1
 None known
xorg-server
Ubuntu:26.04:LTS
 All versions, plus listed versions
2:21.1.18-1ubuntu12:21.1.21-1ubuntu12:21.1.22-1ubuntu12:21.1.22-1ubuntu1.22:21.1.22-1ubuntu1.3
 None known
xwayland
Ubuntu:26.04:LTS
 All versions, plus listed versions
2:24.1.6-1ubuntu12:24.1.8-12:24.1.9-12:24.1.10-1
 None known
xwayland
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 24.1.12-1.1
24.1.12-1.1
xorg-x11-server
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 21.1.21-8.1
21.1.21-8.1
xorg-x11-server
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 21.1.15-160000.6.1
21.1.15-160000.6.1
xwayland
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 24.1.6-160000.6.1
24.1.6-160000.6.1

History

History
RecordedChangedSources
affected
factsOSV
affected, aliases, referencesOSV
affected, aliases, products, referencesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-56000 is a critical vulnerability (CVSS 9.0) in The Xorg Project Xorg-x11-server, published July 8, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 23rd percentile. Fixed in xorg-server 21.1.24-r0.

References

Show 41 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open