Every CVE Search/ Get API key

CVE-2026-93522

X.Org Server Glamor CopyArea Heap Buffer Overflow

7.8 HighFix available

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.20%Unchanged since Oct 29, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

X.Org Server Glamor CopyArea Heap Buffer Overflow

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Record
CVE-2026-93522
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-122
Updated
2026-11-05
EUVDEUVD-2026-112254 7.8

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Record
EUVD-2026-112254
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
GitHub AdvisoriesGHSA-5h3m-pr22-58xf 7.8

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X...

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Record
GHSA-5h3m-pr22-58xf
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-122
Updated
2026-11-02
NVD 7.8

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Record
CVE-2026-93522
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-122
Updated
2026-11-05
OSVALPINE-CVE-2026-93522 7.8

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Record
ALPINE-CVE-2026-93522
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2026-93522 7.8
Record
BELL-CVE-2026-93522
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 17 moreShow less
OSV 7.8

X.Org Server Glamor CopyArea Heap Buffer Overflow

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Record
CVE-2026-93522
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-122
Updated
2026-11-07
OSVDEBIAN-CVE-2026-93522 7.8

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Record
DEBIAN-CVE-2026-93522
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:85191 7.8

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Record
RHSA-2026:85191
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:85193 7.8

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Record
RHSA-2026:85193
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:85191 7.8

Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

  • xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)

  • xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)

  • xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)

  • xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)

  • xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522)

  • xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)

  • xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)

  • xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)

  • xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:85191
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:85193 7.8

Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

  • xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)

  • xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)

  • xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)

  • xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)

  • xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522)

  • xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)

  • xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)

  • xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)

  • xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:85193
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-93522 7.8

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Record
UBUNTU-CVE-2026-93522
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVALSA-2026:85191 No score

Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

  • xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)
  • xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)
  • xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)
  • xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)
  • xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522)
  • xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)
  • xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)
  • xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)
  • xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:85191
Updated
2026-11-02
OSVALSA-2026:85193 No score

Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

  • xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)
  • xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)
  • xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)
  • xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)
  • xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522)
  • xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)
  • xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)
  • xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)
  • xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:85193
Updated
2026-11-02
OSVAZL-111461 No score

CVE-2026-93522 affecting package xorg-x11-server 1.20.10-6

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Record
AZL-111461
Updated
2026-11-05
OSVAZL-112297 No score

CVE-2026-93522 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

Record
AZL-112297
Updated
2026-11-02
OSVCLSA-2026-1792791669 No score

xorg-x11-server-Xwayland: Fix of 8 CVEs

  • CVE-2026-88812: Use-after-free/double free in XKB _CheckSetDoodad: doodad text pointer left dangling after free when reading the font string fails
  • CVE-2026-93516: Use-after-free in DIX: passive grabs keep dangling pointers to a removed input device (grab->device / modifierDevice)
  • CVE-2026-93517: Out-of-bounds read in GLX RenderLarge: dataBytes of the first request not validated against the request length
  • CVE-2026-93518: Heap buffer overflow in XKB key resize: 16-bit size_syms/num_syms/size_acts/num_acts truncate computed sizes, undersizing allocations
  • CVE-2026-93519: Out-of-bounds write in XInput barrier handling: input_constrain_cursor writes barrier events without a bounds check
  • CVE-2026-93521: Heap memory corruption in RandR RRChangeProviderProperty PrependMode due to wrong size and offset when shifting old data
  • CVE-2026-93522: Heap buffer overflow in glamor_upload_boxes: tmp_bits sized from pixmap height, not the source coordinate range
  • CVE-2026-93523: Out-of-bounds access in XInput ProcXIPassiveUngrabDevice: client-supplied modifier values are not validated
Record
CLSA-2026-1792791669
Updated
2026-11-02
OSVMGASA-2026-0529 No score

Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs

XKB SetGeometry TextDoodad Double Free. (CVE-2026-88812) Present Extension Cross-Window Notify Use-After-Free. (CVE-2026-93515) XInput Passive Grab modifierDevice Use-After-Free. (CVE-2026-93516) GLX RenderLarge Heap Buffer Overflow. (CVE-2026-93517) XKB ResizeKeyType Numeric Truncation. (CVE-2026-93518) XFixes Pointer Barrier Event List Buffer Overflow. (CVE-2026-93519) XKB ChangeKeycodeRange Heap Out-of-Bounds Write. (CVE-2026-93520) RandR ChangeProviderProperty Heap Buffer Overflow. (CVE-2026-93521) Glamor CopyArea CPU-FBO Heap Buffer Overflow. (CVE-2026-93522) XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write. (CVE-2026-93523) XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read. (CVE-2026-93524) GestureBuildSprite Use-After-Free. (CVE-2026-93536)

Record
MGASA-2026-0529
Updated
2026-11-02
OSVopenSUSE-SU-2026:12105-1 No score

xwayland-24.1.13-2.1 on GA media

These are all security issues fixed in the xwayland-24.1.13-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12105-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:22085-1 No score

Security update for xwayland

This update for xwayland fixes the following issues:

  • CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).
  • CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).
  • CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).
  • CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).
  • CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).
  • CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).
  • CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).
  • CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).
  • CVE-2026-93522: Glamor CopyArea Heap Buffer Overflow (bsc#1281240).
  • CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).
  • CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).
  • CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244).
Record
openSUSE-SU-2026:22085-1
Updated
2026-11-02
OSVSUSE-SU-2026:24230-1 No score

Security update for xwayland

This update for xwayland fixes the following issues:

  • CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).
  • CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).
  • CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).
  • CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).
  • CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).
  • CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).
  • CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).
  • CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).
  • CVE-2026-93522: Glamor CopyArea Heap Buffer Overflow (bsc#1281240).
  • CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).
  • CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).
  • CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244).
Record
SUSE-SU-2026:24230-1
Updated
2026-11-02
OSVSUSE-SU-2026:4835-1 No score

Security update for xwayland

This update for xwayland fixes the following issues:

  • CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).
  • CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).
  • CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).
  • CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).
  • CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).
  • CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).
  • CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).
  • CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).
  • CVE-2026-93522: Glamor CopyArea Heap Buffer Overflow (bsc#1281240).
  • CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).
  • CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).
  • CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244).
Record
SUSE-SU-2026:4835-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xorg-server
Alpine:v3.24
 before 21.1.25-r0
21.1.25-r0
xwayland
Alpine:v3.24
 before 24.1.14-r0
24.1.14-r0
xorg-x11-server-Xwayland
AlmaLinux:10
From an advisory covering 9 CVEs
 before 24.1.9-4.el10_2.4
24.1.9-4.el10_2.4
xorg-x11-server-Xwayland-devel
AlmaLinux:10
From an advisory covering 9 CVEs
 before 24.1.9-4.el10_2.4
24.1.9-4.el10_2.4
xorg-x11-server-Xwayland
AlmaLinux:9
From an advisory covering 9 CVEs
 before 24.1.9-4.el9_8.4
24.1.9-4.el9_8.4
xorg-x11-server-Xwayland-devel
AlmaLinux:9
From an advisory covering 9 CVEs
 before 24.1.9-4.el9_8.4
24.1.9-4.el9_8.4
xorg-x11-server
Azure Linux:3
 through 1.20.10-6 None known
xorg-x11-server-Xwayland
Azure Linux:3
 before 24.1.14-1
24.1.14-1
xorg-server
Alpaquita:23
 21.1.4-r1 up to 21.1.25-r0
21.1.25-r0
xorg-server
Alpaquita:25
 21.1.16-r0 up to 21.1.25-r0
21.1.25-r0
Show 41 moreShow less
Affected packages
PackageAffectedFixed
xorg-server
Alpaquita:stream
 21.1.4-r1 up to 21.1.25-r0
21.1.25-r0
xorg-x11-server-Xwayland
TuxCare:AlmaLinux:9.6
From an advisory covering 8 CVEs
 before 23.2.7-5.el9_6.tuxcare.els5
23.2.7-5.el9_6.tuxcare.els5
xorg-x11-server-Xwayland-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 8 CVEs
 before 23.2.7-5.el9_6.tuxcare.els5
23.2.7-5.el9_6.tuxcare.els5
xwayland
Debian:12
 All versions, plus listed versions
2:22.1.9-12:23.1.0-12:23.1.1-12:23.2.0-12:23.2.1-1
Show 20 moreShow less
2:23.2.2-12:23.2.3-12:23.2.4-12:23.2.6-12:24.0.99.901-12:24.1.0-12:24.1.10-12:24.1.11-12:24.1.12-12:24.1.13-12:24.1.14-12:24.1.2-12:24.1.3-12:24.1.4-12:24.1.4-22:24.1.4-32:24.1.5-12:24.1.6-12:24.1.8-12:24.1.9-1
 None known
xwayland
Debian:13
 All versions, plus listed versions
2:24.1.10-12:24.1.11-12:24.1.12-12:24.1.13-12:24.1.14-12:24.1.6-12:24.1.8-12:24.1.9-1
 None known
xwayland
Debian:14
 before 2:24.1.14-1, plus listed versions
2:24.1.10-12:24.1.11-12:24.1.12-12:24.1.13-12:24.1.6-12:24.1.8-12:24.1.9-1
2:24.1.14-1
x11-server
Mageia:10
From an advisory covering 12 CVEs
 before 21.1.25-2.mga10
21.1.25-2.mga10
x11-server-xwayland
Mageia:10
From an advisory covering 12 CVEs
 before 24.1.14-1.mga10
24.1.14-1.mga10
tigervnc
Mageia:10
From an advisory covering 12 CVEs
 before 1.15.0-7.3.mga10
1.15.0-7.3.mga10
xorg-x11-server-Xwayland
Red Hat:enterprise_linux:10.2
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el10_2.4
0:24.1.9-4.el10_2.4
xorg-x11-server-Xwayland-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el10_2.4
0:24.1.9-4.el10_2.4
xorg-x11-server-Xwayland-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el10_2.4
0:24.1.9-4.el10_2.4
xorg-x11-server-Xwayland-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el10_2.4
0:24.1.9-4.el10_2.4
xorg-x11-server-Xwayland
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el9_8.4
0:24.1.9-4.el9_8.4
xorg-x11-server-Xwayland-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el9_8.4
0:24.1.9-4.el9_8.4
xorg-x11-server-Xwayland-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el9_8.4
0:24.1.9-4.el9_8.4
xorg-x11-server-Xwayland
Red Hat:enterprise_linux:9::crb
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el9_8.4
0:24.1.9-4.el9_8.4
xorg-x11-server-Xwayland-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el9_8.4
0:24.1.9-4.el9_8.4
xorg-x11-server-Xwayland-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el9_8.4
0:24.1.9-4.el9_8.4
xorg-x11-server-Xwayland-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el9_8.4
0:24.1.9-4.el9_8.4
xorg-x11-server-Xwayland
Rocky Linux:10
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el10_2.4
0:24.1.9-4.el10_2.4
xorg-x11-server-Xwayland
Rocky Linux:9
From an advisory covering 9 CVEs
 before 0:24.1.9-4.el9_8.4
0:24.1.9-4.el9_8.4
xwayland
SUSE:Linux Enterprise Server 16.0
From an advisory covering 12 CVEs
 before 24.1.6-160000.7.1
24.1.6-160000.7.1
xwayland
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 12 CVEs
 before 24.1.6-160000.7.1
24.1.6-160000.7.1
xwayland
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 12 CVEs
 before 24.1.5-150700.3.25.1
24.1.5-150700.3.25.1
xorg-server
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2:1.14.3-3ubuntu22:1.14.3-3ubuntu32:1.14.3-3ubuntu42:1.14.3-5ubuntu12:1.14.4-1ubuntu1
Show 30 moreShow less
2:1.14.4-1ubuntu22:1.14.4.901-0ubuntu22:1.14.5-1ubuntu22:1.14.5-1ubuntu42:1.15.0-1ubuntu12:1.15.0-1ubuntu22:1.15.0-1ubuntu32:1.15.0-1ubuntu42:1.15.0-1ubuntu62:1.15.0-1ubuntu72:1.15.1-0ubuntu12:1.15.1-0ubuntu22:1.15.1-0ubuntu2.12:1.15.1-0ubuntu2.42:1.15.1-0ubuntu2.52:1.15.1-0ubuntu2.62:1.15.1-0ubuntu2.72:1.15.1-0ubuntu2.92:1.15.1-0ubuntu2.102:1.15.1-0ubuntu2.112:1.15.1-0ubuntu2.11+esm22:1.15.1-0ubuntu2.11+esm32:1.15.1-0ubuntu2.11+esm42:1.15.1-0ubuntu2.11+esm52:1.15.1-0ubuntu2.11+esm62:1.15.1-0ubuntu2.11+esm72:1.15.1-0ubuntu2.11+esm82:1.15.1-0ubuntu2.11+esm92:1.15.1-0ubuntu2.11+esm112:1.15.1-0ubuntu2.11+esm12
 None known
xorg-server
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:1.17.2-1ubuntu92:1.17.2-1ubuntu102:1.17.3-2ubuntu12:1.17.3-2ubuntu22:1.17.3-2ubuntu3
Show 33 moreShow less
2:1.17.3-2ubuntu42:1.18.1-1ubuntu32:1.18.1-1ubuntu42:1.18.3-1ubuntu12:1.18.3-1ubuntu22:1.18.3-1ubuntu2.22:1.18.3-1ubuntu2.32:1.18.4-0ubuntu0.12:1.18.4-0ubuntu0.22:1.18.4-0ubuntu0.32:1.18.4-0ubuntu0.42:1.18.4-0ubuntu0.62:1.18.4-0ubuntu0.72:1.18.4-0ubuntu0.82:1.18.4-0ubuntu0.92:1.18.4-0ubuntu0.102:1.18.4-0ubuntu0.112:1.18.4-0ubuntu0.122:1.18.4-0ubuntu0.12+esm12:1.18.4-0ubuntu0.12+esm22:1.18.4-0ubuntu0.12+esm42:1.18.4-0ubuntu0.12+esm52:1.18.4-0ubuntu0.12+esm62:1.18.4-0ubuntu0.12+esm82:1.18.4-0ubuntu0.12+esm92:1.18.4-0ubuntu0.12+esm102:1.18.4-0ubuntu0.12+esm122:1.18.4-0ubuntu0.12+esm132:1.18.4-0ubuntu0.12+esm142:1.18.4-0ubuntu0.12+esm152:1.18.4-0ubuntu0.12+esm162:1.18.4-0ubuntu0.12+esm172:1.18.4-0ubuntu0.12+esm18
 None known
xorg-server-hwe-16.04
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:1.18.4-1ubuntu6.1~16.04.12:1.18.4-1ubuntu6.1~16.04.22:1.19.3-1ubuntu1~16.04.22:1.19.3-1ubuntu1~16.04.32:1.19.3-1ubuntu1~16.04.4
Show 17 moreShow less
2:1.19.5-0ubuntu2~16.04.12:1.19.6-1ubuntu4~16.04.12:1.19.6-1ubuntu4.1~16.04.12:1.19.6-1ubuntu4.1~16.04.22:1.19.6-1ubuntu4.1~16.04.32:1.19.6-1ubuntu4.1~16.04.42:1.19.6-1ubuntu4.1~16.04.52:1.19.6-1ubuntu4.1~16.04.62:1.19.6-1ubuntu4.1~16.04.6+esm12:1.19.6-1ubuntu4.1~16.04.6+esm32:1.19.6-1ubuntu4.1~16.04.6+esm42:1.19.6-1ubuntu4.1~16.04.6+esm52:1.19.6-1ubuntu4.1~16.04.6+esm62:1.19.6-1ubuntu4.1~16.04.6+esm72:1.19.6-1ubuntu4.1~16.04.6+esm82:1.19.6-1ubuntu4.1~16.04.6+esm92:1.19.6-1ubuntu4.1~16.04.6+esm10
 None known
xorg-server
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:1.19.5-0ubuntu22:1.19.6-1ubuntu12:1.19.6-1ubuntu22:1.19.6-1ubuntu32:1.19.6-1ubuntu4
Show 26 moreShow less
2:1.19.6-1ubuntu4.12:1.19.6-1ubuntu4.22:1.19.6-1ubuntu4.32:1.19.6-1ubuntu4.42:1.19.6-1ubuntu4.52:1.19.6-1ubuntu4.62:1.19.6-1ubuntu4.72:1.19.6-1ubuntu4.82:1.19.6-1ubuntu4.92:1.19.6-1ubuntu4.102:1.19.6-1ubuntu4.112:1.19.6-1ubuntu4.122:1.19.6-1ubuntu4.132:1.19.6-1ubuntu4.142:1.19.6-1ubuntu4.152:1.19.6-1ubuntu4.15+esm12:1.19.6-1ubuntu4.15+esm32:1.19.6-1ubuntu4.15+esm42:1.19.6-1ubuntu4.15+esm52:1.19.6-1ubuntu4.15+esm72:1.19.6-1ubuntu4.15+esm82:1.19.6-1ubuntu4.15+esm92:1.19.6-1ubuntu4.15+esm102:1.19.6-1ubuntu4.15+esm112:1.19.6-1ubuntu4.15+esm122:1.19.6-1ubuntu4.15+esm13
 None known
xorg-server-hwe-18.04
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:1.20.1-3ubuntu2.1~18.04.12:1.20.4-1ubuntu3~18.04.12:1.20.5+git20191008-0ubuntu1~18.04.12:1.20.8-2ubuntu2.1~18.04.12:1.20.8-2ubuntu2.2~18.04.1
Show 15 moreShow less
2:1.20.8-2ubuntu2.2~18.04.22:1.20.8-2ubuntu2.2~18.04.32:1.20.8-2ubuntu2.2~18.04.42:1.20.8-2ubuntu2.2~18.04.52:1.20.8-2ubuntu2.2~18.04.62:1.20.8-2ubuntu2.2~18.04.72:1.20.8-2ubuntu2.2~18.04.82:1.20.8-2ubuntu2.2~18.04.92:1.20.8-2ubuntu2.2~18.04.102:1.20.8-2ubuntu2.2~18.04.112:1.20.8-2ubuntu2.2~18.04.11+esm12:1.20.8-2ubuntu2.2~18.04.11+esm22:1.20.8-2ubuntu2.2~18.04.11+esm32:1.20.8-2ubuntu2.2~18.04.11+esm42:1.20.8-2ubuntu2.2~18.04.11+esm5
 None known
xorg-server
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2:1.20.5+git20191008-0ubuntu12:1.20.6-1ubuntu12:1.20.7-2ubuntu12:1.20.7-2ubuntu22:1.20.8-2ubuntu2
Show 25 moreShow less
2:1.20.8-2ubuntu2.12:1.20.8-2ubuntu2.22:1.20.8-2ubuntu2.32:1.20.8-2ubuntu2.42:1.20.8-2ubuntu2.62:1.20.9-2ubuntu1.1~20.04.12:1.20.9-2ubuntu1.2~20.04.12:1.20.9-2ubuntu1.2~20.04.22:1.20.11-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.22:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.42:1.20.13-1ubuntu1~20.04.52:1.20.13-1ubuntu1~20.04.62:1.20.13-1ubuntu1~20.04.82:1.20.13-1ubuntu1~20.04.92:1.20.13-1ubuntu1~20.04.122:1.20.13-1ubuntu1~20.04.142:1.20.13-1ubuntu1~20.04.152:1.20.13-1ubuntu1~20.04.162:1.20.13-1ubuntu1~20.04.172:1.20.13-1ubuntu1~20.04.182:1.20.13-1ubuntu1~20.04.192:1.20.13-1ubuntu1~20.04.202:1.20.13-1ubuntu1~20.04.20+esm1
 None known
xorg-server
Ubuntu:22.04:LTS
 All versions, plus listed versions
2:1.20.13-1ubuntu12:1.20.13-1ubuntu22:1.20.14-1ubuntu12:21.1.3-2ubuntu22:21.1.3-2ubuntu2.1
Show 21 moreShow less
2:21.1.3-2ubuntu2.22:21.1.3-2ubuntu2.32:21.1.3-2ubuntu2.42:21.1.3-2ubuntu2.52:21.1.3-2ubuntu2.62:21.1.3-2ubuntu2.72:21.1.3-2ubuntu2.82:21.1.3-2ubuntu2.92:21.1.4-2ubuntu1.7~22.04.12:21.1.4-2ubuntu1.7~22.04.22:21.1.4-2ubuntu1.7~22.04.52:21.1.4-2ubuntu1.7~22.04.72:21.1.4-2ubuntu1.7~22.04.82:21.1.4-2ubuntu1.7~22.04.92:21.1.4-2ubuntu1.7~22.04.102:21.1.4-2ubuntu1.7~22.04.112:21.1.4-2ubuntu1.7~22.04.122:21.1.4-2ubuntu1.7~22.04.132:21.1.4-2ubuntu1.7~22.04.142:21.1.4-2ubuntu1.7~22.04.152:21.1.4-2ubuntu1.7~22.04.16
 None known
xwayland
Ubuntu:22.04:LTS
 All versions, plus listed versions
2:21.1.2-0ubuntu12:21.1.3-12:21.1.3-1ubuntu12:21.1.4-12:22.1.0-1
Show 19 moreShow less
2:22.1.1-12:22.1.1-1ubuntu0.12:22.1.1-1ubuntu0.22:22.1.1-1ubuntu0.32:22.1.1-1ubuntu0.42:22.1.1-1ubuntu0.52:22.1.1-1ubuntu0.62:22.1.1-1ubuntu0.72:22.1.1-1ubuntu0.92:22.1.1-1ubuntu0.102:22.1.1-1ubuntu0.112:22.1.1-1ubuntu0.122:22.1.1-1ubuntu0.132:22.1.1-1ubuntu0.142:22.1.1-1ubuntu0.152:22.1.1-1ubuntu0.172:22.1.1-1ubuntu0.182:22.1.1-1ubuntu0.192:22.1.1-1ubuntu0.20
 None known
xorg-server
Ubuntu:24.04:LTS
 All versions, plus listed versions
2:21.1.7-3ubuntu22:21.1.7-3ubuntu2.12:21.1.10-1ubuntu12:21.1.11-2ubuntu12:21.1.12-1ubuntu1
Show 8 moreShow less
2:21.1.12-1ubuntu1.12:21.1.12-1ubuntu1.22:21.1.12-1ubuntu1.32:21.1.12-1ubuntu1.42:21.1.12-1ubuntu1.52:21.1.12-1ubuntu1.62:21.1.12-1ubuntu1.82:21.1.12-1ubuntu1.9
 None known
xwayland
Ubuntu:24.04:LTS
 All versions, plus listed versions
2:23.2.0-12:23.2.0-1ubuntu0.12:23.2.3-12:23.2.4-12:23.2.4-1build1
Show 10 moreShow less
2:23.2.4-1build22:23.2.4-1build32:23.2.6-12:23.2.6-1ubuntu0.12:23.2.6-1ubuntu0.22:23.2.6-1ubuntu0.42:23.2.6-1ubuntu0.52:23.2.6-1ubuntu0.62:23.2.6-1ubuntu0.72:23.2.6-1ubuntu0.8
 None known
xorg-server
Ubuntu:26.10
 All versions, plus listed versions
2:21.1.22-1ubuntu12:21.1.22-1ubuntu42:21.1.24-1ubuntu1
 None known
xwayland
Ubuntu:26.10
 All versions, plus listed versions
2:24.1.10-12:24.1.12-12:24.1.13-12:24.1.14-1
 None known
xorg-server
Ubuntu:26.04:LTS
 All versions, plus listed versions
2:21.1.18-1ubuntu12:21.1.21-1ubuntu12:21.1.22-1ubuntu12:21.1.22-1ubuntu1.22:21.1.22-1ubuntu1.3
 None known
xwayland
Ubuntu:26.04:LTS
 All versions, plus listed versions
2:24.1.6-1ubuntu12:24.1.8-12:24.1.9-12:24.1.10-1
 None known
xwayland
openSUSE:Tumbleweed
From an advisory covering 12 CVEs
 before 24.1.13-2.1
24.1.13-2.1
xwayland
openSUSE:Leap 16.0
From an advisory covering 12 CVEs
 before 24.1.6-160000.7.1
24.1.6-160000.7.1

History

History
RecordedChangedSources
affectedCVE List, EUVD, NVD
facts, publishedOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-93522 is a high vulnerability (CVSS 7.8) in X.org Xwayland, published October 8, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. Fixed in xorg-server 21.1.25-r0.

References

Show 88 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open