CVE-2026-94283
Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
- Record
CVE-2026-94283- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2026-88174
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
- Record
EUVD-2026-88174- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-j5qx-6vm4-vfcj
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11...
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
- Record
GHSA-j5qx-6vm4-vfcj- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
NVD
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
- Record
CVE-2026-94283- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2026-94283
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
- Record
ALPINE-CVE-2026-94283- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2026-94283
- Record
BELL-CVE-2026-94283- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-04
Show 21 moreShow less
OSV
Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
- Record
CVE-2026-94283- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-07
OSVDEBIAN-CVE-2026-94283
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
- Record
DEBIAN-CVE-2026-94283- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-4247
libX11 security update
Core X11 protocol client library.
Security Fix(es):
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.(CVE-2026-88806)
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94283)
An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94284)
An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94285)
- Record
OESA-2026-4247- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-4248
libX11 security update
Core X11 protocol client library.
Security Fix(es):
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.(CVE-2026-88806)
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94283)
An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94284)
An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94285)
- Record
OESA-2026-4248- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-4249
libX11 security update
Core X11 protocol client library.
Security Fix(es):
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.(CVE-2026-88806)
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94283)
An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94284)
An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94285)
- Record
OESA-2026-4249- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-4250
libX11 security update
Core X11 protocol client library.
Security Fix(es):
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.(CVE-2026-88806)
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94283)
An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94284)
An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.(CVE-2026-94285)
- Record
OESA-2026-4250- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:79278
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:79278- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-94283
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
- Record
UBUNTU-CVE-2026-94283- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-104963 No score
CVE-2026-94283 affecting package libX11 for versions less than 1.8.14-1
An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
- Record
AZL-104963- Updated
- 2026-11-02
OSVMGASA-2026-0508 No score
Updated libx11 package fixes security vulnerabilities
libX11 XkbGetMap Reply Heap-based Buffer Overflow. (CVE-2026-88806) Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser. (CVE-2026-94283) Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser. (CVE-2026-94284) Out-of-bounds read in libX11's byte-oriented codeset parser. (CVE-2026-94285)
- Record
MGASA-2026-0508- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11894-1 No score
libX11-6-1.8.13-3.1 on GA media
These are all security issues fixed in the libX11-6-1.8.13-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11894-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:22055-1 No score
Security update for libX11
This update for libX11 fixes the following issues:
- CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser (bsc#1281657).
- CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).
- Record
openSUSE-SU-2026:22055-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:24118-1 No score
Security update for libX11
This update for libX11 fixes the following issues:
- CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser (bsc#1281657).
- CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).
- Record
SUSE-SU-2026:24118-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:24201-1 No score
Security update for libX11
This update for libX11 fixes the following issues:
- CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser (bsc#1281657).
- CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).
- Record
SUSE-SU-2026:24201-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:24365-1 No score
Security update for libX11
This update for libX11 fixes the following issues:
- CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
- CVE-2026-94283: Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser (bsc#1281657).
- CVE-2026-94285: Out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).
- Record
SUSE-SU-2026:24365-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:24552-1 No score
Security update for libX11
This update for libX11 fixes the following issues:
- CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
- CVE-2026-94283: Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser (bsc#1281657).
- CVE-2026-94285: Out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).
- Record
SUSE-SU-2026:24552-1- Updated
- 2026-11-07
OSVSUSE-SU-2026:4410-1 No score
Security update for libX11
This update for libX11 fixes the following issues:
- CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
- CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser (bsc#1281657).
- CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).
- Record
SUSE-SU-2026:4410-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4500-1 No score
Security update for libX11
This update for libX11 fixes the following issues:
- CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
- CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser (bsc#1281657).
- CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).
- Record
SUSE-SU-2026:4500-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4501-1 No score
Security update for libX11
This update for libX11 fixes the following issues:
- CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
- CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser (bsc#1281657).
- CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).
- Record
SUSE-SU-2026:4501-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4502-1 No score
Security update for libX11
This update for libX11 fixes the following issues:
- CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
- CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser (bsc#1281657).
- CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).
- Record
SUSE-SU-2026:4502-1- Updated
- 2026-11-02
OSVUSN-8913-1 No score
libx11 vulnerabilities
Adam Bedard discovered that libx11 incorrectly handled certain XKB keyboard map replies. If a user were tricked into connecting to a malicious X server, a remote attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-88806)
It was discovered that libx11 incorrectly handled certain X Input Method (XIM) messages. If a user were tricked into connecting to a malicious X server, a remote attacker could possibly use these issues to cause libx11 to crash, resulting in a denial of service. (CVE-2026-94283, CVE-2026-94284)
It was discovered that libx11 incorrectly handled converting certain multibyte text. An attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service. (CVE-2026-94285)
- Record
USN-8913-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libx11Alpine:v3.24 |
before 1.8.14-r0 | 1.8.14-r0 |
libX11Azure Linux:3 |
before 1.8.14-1 | 1.8.14-1 |
libx11Alpaquita:23 |
1.8.2-r0 up to 1.8.14-r0 | 1.8.14-r0 |
libx11Alpaquita:25 |
1.8.11-r0 up to 1.8.14-r0 | 1.8.14-r0 |
libx11Alpaquita:stream |
1.8.2-r0 up to 1.8.14-r0 | 1.8.14-r0 |
libx11BellSoft Hardened Containers:23 |
1.8.2-r0 up to 1.8.14-r0 | 1.8.14-r0 |
libx11BellSoft Hardened Containers:25 |
1.8.11-r0 up to 1.8.14-r0 | 1.8.14-r0 |
libx11BellSoft Hardened Containers:stream |
1.8.2-r0 up to 1.8.14-r0 | 1.8.14-r0 |
libx11Debian:12 |
All versions, plus listed versions 2:1.8.10-12:1.8.10-22:1.8.12-12:1.8.13-12:1.8.14-1 Show 5 moreShow less2:1.8.4-22:1.8.4-2+deb12u12:1.8.4-2+deb12u22:1.8.6-12:1.8.7-1 |
None known |
libx11Debian:13 |
All versions, plus listed versions 2:1.8.12-12:1.8.13-12:1.8.14-1 |
None known |
Show 48 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libx11Debian:14 |
before 2:1.8.14-1, plus listed versions 2:1.8.12-12:1.8.13-1 |
2:1.8.14-1 |
libx11Mageia:10 From an advisory covering 4 CVEs |
before 1.8.12-1.1.mga10 | 1.8.12-1.1.mga10 |
libX11openEuler:24.03-LTS-SP1 From an advisory covering 4 CVEs |
before 1.8.7-4.oe2403sp1 | 1.8.7-4.oe2403sp1 |
libX11openEuler:24.03-LTS-SP3 From an advisory covering 4 CVEs |
before 1.8.7-4.oe2403sp3 | 1.8.7-4.oe2403sp3 |
libX11openEuler:24.03-LTS-SP4 From an advisory covering 4 CVEs |
before 1.8.7-4.oe2403sp4 | 1.8.7-4.oe2403sp4 |
libX11openEuler:22.03-LTS-SP4 From an advisory covering 4 CVEs |
before 1.7.2-11.oe2203sp4 | 1.7.2-11.oe2203sp4 |
libX11Red Hat:hummingbird:1 From an advisory covering 3 CVEs |
before 0:1.8.13-3.1.hum1 | 0:1.8.13-3.1.hum1 |
libX11-commonRed Hat:hummingbird:1 From an advisory covering 3 CVEs |
before 0:1.8.13-3.1.hum1 | 0:1.8.13-3.1.hum1 |
libX11-develRed Hat:hummingbird:1 From an advisory covering 3 CVEs |
before 0:1.8.13-3.1.hum1 | 0:1.8.13-3.1.hum1 |
libX11-xcbRed Hat:hummingbird:1 From an advisory covering 3 CVEs |
before 0:1.8.13-3.1.hum1 | 0:1.8.13-3.1.hum1 |
libX11SUSE:Linux Micro 6.2 From an advisory covering 3 CVEs |
before 1.8.10-160000.5.1 | 1.8.10-160000.5.1 |
libX11SUSE:Linux Enterprise Server 16.0 From an advisory covering 3 CVEs |
before 1.8.10-160000.5.1 | 1.8.10-160000.5.1 |
libX11SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 3 CVEs |
before 1.8.10-160000.5.1 | 1.8.10-160000.5.1 |
libX11SUSE:Linux Micro 6.0 From an advisory covering 4 CVEs |
before 1.8.7-159998.1.1 | 1.8.7-159998.1.1 |
libX11SUSE:Linux Micro 6.1 From an advisory covering 4 CVEs |
before 1.8.7-slfo.1.1_4.1 | 1.8.7-slfo.1.1_4.1 |
libX11SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 4 CVEs |
before 1.6.2-12.41.1 | 1.6.2-12.41.1 |
libX11SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 4 CVEs |
before 1.6.2-12.41.1 | 1.6.2-12.41.1 |
libX11SUSE:Linux Enterprise Micro 5.3 From an advisory covering 4 CVEs |
before 1.6.5-150000.3.41.1 | 1.6.5-150000.3.41.1 |
libX11SUSE:Linux Enterprise Micro 5.4 From an advisory covering 4 CVEs |
before 1.6.5-150000.3.41.1 | 1.6.5-150000.3.41.1 |
libX11SUSE:Linux Enterprise Micro 5.5 From an advisory covering 4 CVEs |
before 1.6.5-150000.3.41.1 | 1.6.5-150000.3.41.1 |
libX11SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 4 CVEs |
before 1.6.5-150000.3.41.1 | 1.6.5-150000.3.41.1 |
libX11SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 4 CVEs |
before 1.6.5-150000.3.41.1 | 1.6.5-150000.3.41.1 |
libX11SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 4 CVEs |
before 1.6.5-150000.3.41.1 | 1.6.5-150000.3.41.1 |
libX11SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 4 CVEs |
before 1.6.5-150000.3.41.1 | 1.6.5-150000.3.41.1 |
libX11SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 4 CVEs |
before 1.6.5-150000.3.41.1 | 1.6.5-150000.3.41.1 |
libX11SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 4 CVEs |
before 1.6.5-150000.3.41.1 | 1.6.5-150000.3.41.1 |
libX11SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 4 CVEs |
before 1.6.5-150000.3.41.1 | 1.6.5-150000.3.41.1 |
libX11SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 4 CVEs |
before 1.6.5-150000.3.41.1 | 1.6.5-150000.3.41.1 |
libX11SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 4 CVEs |
before 1.8.7-150600.3.11.1 | 1.8.7-150600.3.11.1 |
libX11SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 4 CVEs |
before 1.8.7-150600.3.11.1 | 1.8.7-150600.3.11.1 |
libX11SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 4 CVEs |
before 1.8.10-150700.4.8.1 | 1.8.10-150700.4.8.1 |
libx11Ubuntu:Pro:14.04:LTS |
before 2:1.6.2-1ubuntu2.1+esm6, plus listed versions 2:1.6.1-1ubuntu12:1.6.1-1ubuntu22:1.6.2-1ubuntu12:1.6.2-1ubuntu22:1.6.2-1ubuntu2.1 Show 5 moreShow less2:1.6.2-1ubuntu2.1+esm12:1.6.2-1ubuntu2.1+esm22:1.6.2-1ubuntu2.1+esm32:1.6.2-1ubuntu2.1+esm42:1.6.2-1ubuntu2.1+esm5 |
2:1.6.2-1ubuntu2.1+esm6 |
libx11Ubuntu:Pro:16.04:LTS |
before 2:1.6.3-1ubuntu2.2+esm5, plus listed versions 2:1.6.3-1ubuntu22:1.6.3-1ubuntu2.12:1.6.3-1ubuntu2.22:1.6.3-1ubuntu2.2+esm12:1.6.3-1ubuntu2.2+esm22:1.6.3-1ubuntu2.2+esm32:1.6.3-1ubuntu2.2+esm4 |
2:1.6.3-1ubuntu2.2+esm5 |
libx11Ubuntu:Pro:18.04:LTS |
before 2:1.6.4-3ubuntu0.4+esm3, plus listed versions 2:1.6.4-32:1.6.4-3ubuntu0.12:1.6.4-3ubuntu0.22:1.6.4-3ubuntu0.32:1.6.4-3ubuntu0.42:1.6.4-3ubuntu0.4+esm12:1.6.4-3ubuntu0.4+esm2 |
2:1.6.4-3ubuntu0.4+esm3 |
libx11Ubuntu:Pro:20.04:LTS |
before 2:1.6.9-2ubuntu1.6+esm1, plus listed versions 2:1.6.8-12:1.6.9-22:1.6.9-2ubuntu12:1.6.9-2ubuntu1.12:1.6.9-2ubuntu1.22:1.6.9-2ubuntu1.52:1.6.9-2ubuntu1.6 |
2:1.6.9-2ubuntu1.6+esm1 |
libx11Ubuntu:22.04:LTS |
before 2:1.7.5-1ubuntu0.4, plus listed versions 2:1.7.2-12:1.7.2-22:1.7.2-2build12:1.7.5-12:1.7.5-1ubuntu0.22:1.7.5-1ubuntu0.3 |
2:1.7.5-1ubuntu0.4 |
libx11Ubuntu:24.04:LTS |
before 2:1.8.7-1ubuntu0.1, plus listed versions 2:1.8.6-1ubuntu12:1.8.7-12:1.8.7-1build1 |
2:1.8.7-1ubuntu0.1 |
libx11Ubuntu:26.10 |
All versions, plus listed versions 2:1.8.13-1 |
None known |
libx11Ubuntu:26.04:LTS |
before 2:1.8.13-1ubuntu0.1, plus listed versions 2:1.8.12-1build12:1.8.12-1build22:1.8.13-1 |
2:1.8.13-1ubuntu0.1 |
libx11Ubuntu:Pro:14.04:LTS From an advisory covering 4 CVEs |
before 2:1.6.2-1ubuntu2.1+esm6, plus listed versions 2:1.6.1-1ubuntu12:1.6.1-1ubuntu22:1.6.2-1ubuntu12:1.6.2-1ubuntu22:1.6.2-1ubuntu2.1 Show 5 moreShow less2:1.6.2-1ubuntu2.1+esm12:1.6.2-1ubuntu2.1+esm22:1.6.2-1ubuntu2.1+esm32:1.6.2-1ubuntu2.1+esm42:1.6.2-1ubuntu2.1+esm5 |
2:1.6.2-1ubuntu2.1+esm6 |
libx11Ubuntu:Pro:16.04:LTS From an advisory covering 4 CVEs |
before 2:1.6.3-1ubuntu2.2+esm5, plus listed versions 2:1.6.3-1ubuntu22:1.6.3-1ubuntu2.12:1.6.3-1ubuntu2.22:1.6.3-1ubuntu2.2+esm12:1.6.3-1ubuntu2.2+esm22:1.6.3-1ubuntu2.2+esm32:1.6.3-1ubuntu2.2+esm4 |
2:1.6.3-1ubuntu2.2+esm5 |
libx11Ubuntu:Pro:18.04:LTS From an advisory covering 4 CVEs |
before 2:1.6.4-3ubuntu0.4+esm3, plus listed versions 2:1.6.4-32:1.6.4-3ubuntu0.12:1.6.4-3ubuntu0.22:1.6.4-3ubuntu0.32:1.6.4-3ubuntu0.42:1.6.4-3ubuntu0.4+esm12:1.6.4-3ubuntu0.4+esm2 |
2:1.6.4-3ubuntu0.4+esm3 |
libx11Ubuntu:Pro:20.04:LTS From an advisory covering 4 CVEs |
before 2:1.6.9-2ubuntu1.6+esm1, plus listed versions 2:1.6.8-12:1.6.9-22:1.6.9-2ubuntu12:1.6.9-2ubuntu1.12:1.6.9-2ubuntu1.22:1.6.9-2ubuntu1.52:1.6.9-2ubuntu1.6 |
2:1.6.9-2ubuntu1.6+esm1 |
libx11Ubuntu:22.04:LTS From an advisory covering 4 CVEs |
before 2:1.7.5-1ubuntu0.4, plus listed versions 2:1.7.2-12:1.7.2-22:1.7.2-2build12:1.7.5-12:1.7.5-1ubuntu0.22:1.7.5-1ubuntu0.3 |
2:1.7.5-1ubuntu0.4 |
libx11Ubuntu:24.04:LTS From an advisory covering 4 CVEs |
before 2:1.8.7-1ubuntu0.1, plus listed versions 2:1.8.6-1ubuntu12:1.8.7-12:1.8.7-1build1 |
2:1.8.7-1ubuntu0.1 |
libx11Ubuntu:26.04:LTS From an advisory covering 4 CVEs |
before 2:1.8.13-1ubuntu0.1, plus listed versions 2:1.8.12-1build12:1.8.12-1build22:1.8.13-1 |
2:1.8.13-1ubuntu0.1 |
libX11openSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 1.8.13-3.1 | 1.8.13-3.1 |
libX11openSUSE:Leap 16.0 From an advisory covering 3 CVEs |
before 1.8.10-160000.5.1 | 1.8.10-160000.5.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| affected | ||
| affected, facts | OSV | |
| affected | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-94283 is a medium vulnerability (CVSS 6.5) in The X11 Project Libx11, published September 28, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. Fixed in libx11 1.8.14-r0.
References
gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310/diffs?commit_id=42d0303f243002a9856c76060569a61893c670dd
nvd.nist.gov/vuln/detail/CVE-2026-94283
github.com/advisories/GHSA-j5qx-6vm4-vfcj
security.alpinelinux.org/vuln/CVE-2026-94283
docs.bell-sw.com/security/cves/CVE-2026-94283
Show 50 moreShow less
security-tracker.debian.org/tracker/CVE-2026-94283
advisories.mageia.org/MGASA-2026-0508.html
bugs.mageia.org/show_bug.cgi?id=36378
lists.opensuse.org/archives/list/[email protected]/message/VMGJMDHH5N75WKPK3RKCE2FKPV4MXMHR
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-4247
access.redhat.com/errata/RHSA-2026:79278
images.redhat.com
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79278.json
bugzilla.redhat.com/show_bug.cgi?id=2542367
cve.org/CVERecord?id=CVE-2026-94283
suse.com/support/update/announcement/2026/suse-su-202624118-1
bugzilla.suse.com/1281653
ubuntu.com/security/CVE-2026-94283