{"id":"CVE-2026-93523","aliases":["ALPINE-CVE-2026-93523","ALSA-2026:82015","ALSA-2026:85191","ALSA-2026:85193","ALSA-2026:86907","ALSA-2026:89747","AZL-111464","AZL-111497","AZL-112279","BELL-CVE-2026-93523","CLSA-2026-1792791669","DEBIAN-CVE-2026-93523","EUVD-2026-112256","GHSA-2mch-vxw7-ccc2","MGASA-2026-0529","OESA-2026-4468","OESA-2026-4469","OESA-2026-4470","OESA-2026-4471","RHSA-2026:82015","RHSA-2026:85191","RHSA-2026:85193","RLSA-2026:82015","RLSA-2026:85191","RLSA-2026:85193","RLSA-2026:86907","RLSA-2026:89747","SUSE-SU-2026:24230-1","SUSE-SU-2026:4636-1","SUSE-SU-2026:4645-1","SUSE-SU-2026:4646-1","SUSE-SU-2026:4647-1","SUSE-SU-2026:4663-1","SUSE-SU-2026:4835-1","UBUNTU-CVE-2026-93523","openSUSE-SU-2026:12104-1","openSUSE-SU-2026:12105-1","openSUSE-SU-2026:22085-1"],"status":"published","title":"X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00202,"percentile":0.10261,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2026-10-08T17:21:32.982413Z","modified":"2026-11-05T11:46:22Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"xorg-server","fixed_in":["21.1.25-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"xwayland","fixed_in":["24.1.14-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"xorg-x11-server-Xwayland","fixed_in":["24.1.14-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"xorg-server","fixed_in":["21.1.25-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"xorg-server","fixed_in":["21.1.25-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"xorg-server","fixed_in":["21.1.25-r0"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xorg-server","fixed_in":["2:21.1.25-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xwayland","fixed_in":["2:24.1.14-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.25-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.14-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.9-4.el10_2.4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.9-4.el10_2.4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.9-4.el9_8.4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.9-4.el9_8.4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.3-20.el8_10.4"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.5"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.5"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.5"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.5"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.5"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.5"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.5"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.5"}]}],"bundled":8},{"source":"osv","ecosystem":"Azure Linux:3","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.20.10-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"wayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.22.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.14-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.1.4-r1"},{"fixed":"21.1.25-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.1.16-r0"},{"fixed":"21.1.25-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.1.4-r1"},{"fixed":"21.1.25-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.7-5.el9_6.tuxcare.els5"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.7-5.el9_6.tuxcare.els5"}]}],"bundled":8},{"source":"osv","ecosystem":"Debian:12","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.1.10-1","2:21.1.11-1","2:21.1.11-2","2:21.1.11-3","2:21.1.12-1","2:21.1.13-1","2:21.1.13-2","2:21.1.13-3","2:21.1.13-3.1","2:21.1.14-1","2:21.1.14-2","2:21.1.15-1","2:21.1.15-2","2:21.1.15-3","2:21.1.16-1","2:21.1.16-1.1","2:21.1.16-1.2","2:21.1.16-1.3","2:21.1.18-1","2:21.1.18-2","2:21.1.20-1","2:21.1.21-1","2:21.1.22-1","2:21.1.23-1","2:21.1.24-1","2:21.1.25-1","2:21.1.25-2","2:21.1.7-3","2:21.1.7-3+deb12u1","2:21.1.7-3+deb12u10","2:21.1.7-3+deb12u11","2:21.1.7-3+deb12u12","2:21.1.7-3+deb12u13","2:21.1.7-3+deb12u2","2:21.1.7-3+deb12u3","2:21.1.7-3+deb12u4","2:21.1.7-3+deb12u5","2:21.1.7-3+deb12u6","2:21.1.7-3+deb12u7","2:21.1.7-3+deb12u8","2:21.1.7-3+deb12u9","2:21.1.8-1","2:21.1.9-1","2:21.1.9-1+hurd.1"]},{"source":"osv","ecosystem":"Debian:13","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.1.16-1.3","2:21.1.16-1.3+deb13u1","2:21.1.16-1.3+deb13u2","2:21.1.16-1.3+deb13u3","2:21.1.16-1.3+deb13u4","2:21.1.18-1","2:21.1.18-2","2:21.1.20-1","2:21.1.21-1","2:21.1.22-1","2:21.1.23-1","2:21.1.24-1","2:21.1.25-1","2:21.1.25-2"]},{"source":"osv","ecosystem":"Debian:14","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.1.25-1"}]}],"versions":["2:21.1.16-1.3","2:21.1.18-1","2:21.1.18-2","2:21.1.20-1","2:21.1.21-1","2:21.1.22-1","2:21.1.23-1","2:21.1.24-1"]},{"source":"osv","ecosystem":"Debian:12","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:22.1.9-1","2:23.1.0-1","2:23.1.1-1","2:23.2.0-1","2:23.2.1-1","2:23.2.2-1","2:23.2.3-1","2:23.2.4-1","2:23.2.6-1","2:24.0.99.901-1","2:24.1.0-1","2:24.1.10-1","2:24.1.11-1","2:24.1.12-1","2:24.1.13-1","2:24.1.14-1","2:24.1.2-1","2:24.1.3-1","2:24.1.4-1","2:24.1.4-2","2:24.1.4-3","2:24.1.5-1","2:24.1.6-1","2:24.1.8-1","2:24.1.9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:24.1.10-1","2:24.1.11-1","2:24.1.12-1","2:24.1.13-1","2:24.1.14-1","2:24.1.6-1","2:24.1.8-1","2:24.1.9-1"]},{"source":"osv","ecosystem":"Debian:14","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.1.14-1"}]}],"versions":["2:24.1.10-1","2:24.1.11-1","2:24.1.12-1","2:24.1.13-1","2:24.1.6-1","2:24.1.8-1","2:24.1.9-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.25-2.mga10"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:10","package":"x11-server-xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.14-1.mga10"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:10","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-7.3.mga10"}]}],"bundled":12},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-48.oe2203sp4"}]}],"bundled":10},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-49.oe2403sp1"}]}],"bundled":10},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-49.oe2403sp3"}]}],"bundled":10},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-49.oe2403sp4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el10_2.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el10_2.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el10_2.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el10_2.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:10","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el10_2.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-20.el8_10.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.5"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.6-160000.7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.6-160000.7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-10.108.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-10.108.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-150500.7.55.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-150500.7.55.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-150500.7.55.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-150500.7.55.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.15-150700.5.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.15-150700.5.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.11-150600.5.34.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.11-150600.5.34.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-150400.38.77.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-150400.38.77.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-150400.38.77.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-150400.38.77.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.5-150700.3.25.1"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.14.3-3ubuntu2","2:1.14.3-3ubuntu3","2:1.14.3-3ubuntu4","2:1.14.3-5ubuntu1","2:1.14.4-1ubuntu1","2:1.14.4-1ubuntu2","2:1.14.4.901-0ubuntu2","2:1.14.5-1ubuntu2","2:1.14.5-1ubuntu4","2:1.15.0-1ubuntu1","2:1.15.0-1ubuntu2","2:1.15.0-1ubuntu3","2:1.15.0-1ubuntu4","2:1.15.0-1ubuntu6","2:1.15.0-1ubuntu7","2:1.15.1-0ubuntu1","2:1.15.1-0ubuntu2","2:1.15.1-0ubuntu2.1","2:1.15.1-0ubuntu2.4","2:1.15.1-0ubuntu2.5","2:1.15.1-0ubuntu2.6","2:1.15.1-0ubuntu2.7","2:1.15.1-0ubuntu2.9","2:1.15.1-0ubuntu2.10","2:1.15.1-0ubuntu2.11","2:1.15.1-0ubuntu2.11+esm2","2:1.15.1-0ubuntu2.11+esm3","2:1.15.1-0ubuntu2.11+esm4","2:1.15.1-0ubuntu2.11+esm5","2:1.15.1-0ubuntu2.11+esm6","2:1.15.1-0ubuntu2.11+esm7","2:1.15.1-0ubuntu2.11+esm8","2:1.15.1-0ubuntu2.11+esm9","2:1.15.1-0ubuntu2.11+esm11","2:1.15.1-0ubuntu2.11+esm12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.17.2-1ubuntu9","2:1.17.2-1ubuntu10","2:1.17.3-2ubuntu1","2:1.17.3-2ubuntu2","2:1.17.3-2ubuntu3","2:1.17.3-2ubuntu4","2:1.18.1-1ubuntu3","2:1.18.1-1ubuntu4","2:1.18.3-1ubuntu1","2:1.18.3-1ubuntu2","2:1.18.3-1ubuntu2.2","2:1.18.3-1ubuntu2.3","2:1.18.4-0ubuntu0.1","2:1.18.4-0ubuntu0.2","2:1.18.4-0ubuntu0.3","2:1.18.4-0ubuntu0.4","2:1.18.4-0ubuntu0.6","2:1.18.4-0ubuntu0.7","2:1.18.4-0ubuntu0.8","2:1.18.4-0ubuntu0.9","2:1.18.4-0ubuntu0.10","2:1.18.4-0ubuntu0.11","2:1.18.4-0ubuntu0.12","2:1.18.4-0ubuntu0.12+esm1","2:1.18.4-0ubuntu0.12+esm2","2:1.18.4-0ubuntu0.12+esm4","2:1.18.4-0ubuntu0.12+esm5","2:1.18.4-0ubuntu0.12+esm6","2:1.18.4-0ubuntu0.12+esm8","2:1.18.4-0ubuntu0.12+esm9","2:1.18.4-0ubuntu0.12+esm10","2:1.18.4-0ubuntu0.12+esm12","2:1.18.4-0ubuntu0.12+esm13","2:1.18.4-0ubuntu0.12+esm14","2:1.18.4-0ubuntu0.12+esm15","2:1.18.4-0ubuntu0.12+esm16","2:1.18.4-0ubuntu0.12+esm17","2:1.18.4-0ubuntu0.12+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"xorg-server-hwe-16.04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.18.4-1ubuntu6.1~16.04.1","2:1.18.4-1ubuntu6.1~16.04.2","2:1.19.3-1ubuntu1~16.04.2","2:1.19.3-1ubuntu1~16.04.3","2:1.19.3-1ubuntu1~16.04.4","2:1.19.5-0ubuntu2~16.04.1","2:1.19.6-1ubuntu4~16.04.1","2:1.19.6-1ubuntu4.1~16.04.1","2:1.19.6-1ubuntu4.1~16.04.2","2:1.19.6-1ubuntu4.1~16.04.3","2:1.19.6-1ubuntu4.1~16.04.4","2:1.19.6-1ubuntu4.1~16.04.5","2:1.19.6-1ubuntu4.1~16.04.6","2:1.19.6-1ubuntu4.1~16.04.6+esm1","2:1.19.6-1ubuntu4.1~16.04.6+esm3","2:1.19.6-1ubuntu4.1~16.04.6+esm4","2:1.19.6-1ubuntu4.1~16.04.6+esm5","2:1.19.6-1ubuntu4.1~16.04.6+esm6","2:1.19.6-1ubuntu4.1~16.04.6+esm7","2:1.19.6-1ubuntu4.1~16.04.6+esm8","2:1.19.6-1ubuntu4.1~16.04.6+esm9","2:1.19.6-1ubuntu4.1~16.04.6+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.19.5-0ubuntu2","2:1.19.6-1ubuntu1","2:1.19.6-1ubuntu2","2:1.19.6-1ubuntu3","2:1.19.6-1ubuntu4","2:1.19.6-1ubuntu4.1","2:1.19.6-1ubuntu4.2","2:1.19.6-1ubuntu4.3","2:1.19.6-1ubuntu4.4","2:1.19.6-1ubuntu4.5","2:1.19.6-1ubuntu4.6","2:1.19.6-1ubuntu4.7","2:1.19.6-1ubuntu4.8","2:1.19.6-1ubuntu4.9","2:1.19.6-1ubuntu4.10","2:1.19.6-1ubuntu4.11","2:1.19.6-1ubuntu4.12","2:1.19.6-1ubuntu4.13","2:1.19.6-1ubuntu4.14","2:1.19.6-1ubuntu4.15","2:1.19.6-1ubuntu4.15+esm1","2:1.19.6-1ubuntu4.15+esm3","2:1.19.6-1ubuntu4.15+esm4","2:1.19.6-1ubuntu4.15+esm5","2:1.19.6-1ubuntu4.15+esm7","2:1.19.6-1ubuntu4.15+esm8","2:1.19.6-1ubuntu4.15+esm9","2:1.19.6-1ubuntu4.15+esm10","2:1.19.6-1ubuntu4.15+esm11","2:1.19.6-1ubuntu4.15+esm12","2:1.19.6-1ubuntu4.15+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xorg-server-hwe-18.04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.20.1-3ubuntu2.1~18.04.1","2:1.20.4-1ubuntu3~18.04.1","2:1.20.5+git20191008-0ubuntu1~18.04.1","2:1.20.8-2ubuntu2.1~18.04.1","2:1.20.8-2ubuntu2.2~18.04.1","2:1.20.8-2ubuntu2.2~18.04.2","2:1.20.8-2ubuntu2.2~18.04.3","2:1.20.8-2ubuntu2.2~18.04.4","2:1.20.8-2ubuntu2.2~18.04.5","2:1.20.8-2ubuntu2.2~18.04.6","2:1.20.8-2ubuntu2.2~18.04.7","2:1.20.8-2ubuntu2.2~18.04.8","2:1.20.8-2ubuntu2.2~18.04.9","2:1.20.8-2ubuntu2.2~18.04.10","2:1.20.8-2ubuntu2.2~18.04.11","2:1.20.8-2ubuntu2.2~18.04.11+esm1","2:1.20.8-2ubuntu2.2~18.04.11+esm2","2:1.20.8-2ubuntu2.2~18.04.11+esm3","2:1.20.8-2ubuntu2.2~18.04.11+esm4","2:1.20.8-2ubuntu2.2~18.04.11+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.20.5+git20191008-0ubuntu1","2:1.20.6-1ubuntu1","2:1.20.7-2ubuntu1","2:1.20.7-2ubuntu2","2:1.20.8-2ubuntu2","2:1.20.8-2ubuntu2.1","2:1.20.8-2ubuntu2.2","2:1.20.8-2ubuntu2.3","2:1.20.8-2ubuntu2.4","2:1.20.8-2ubuntu2.6","2:1.20.9-2ubuntu1.1~20.04.1","2:1.20.9-2ubuntu1.2~20.04.1","2:1.20.9-2ubuntu1.2~20.04.2","2:1.20.11-1ubuntu1~20.04.2","2:1.20.13-1ubuntu1~20.04.2","2:1.20.13-1ubuntu1~20.04.3","2:1.20.13-1ubuntu1~20.04.4","2:1.20.13-1ubuntu1~20.04.5","2:1.20.13-1ubuntu1~20.04.6","2:1.20.13-1ubuntu1~20.04.8","2:1.20.13-1ubuntu1~20.04.9","2:1.20.13-1ubuntu1~20.04.12","2:1.20.13-1ubuntu1~20.04.14","2:1.20.13-1ubuntu1~20.04.15","2:1.20.13-1ubuntu1~20.04.16","2:1.20.13-1ubuntu1~20.04.17","2:1.20.13-1ubuntu1~20.04.18","2:1.20.13-1ubuntu1~20.04.19","2:1.20.13-1ubuntu1~20.04.20","2:1.20.13-1ubuntu1~20.04.20+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.20.13-1ubuntu1","2:1.20.13-1ubuntu2","2:1.20.14-1ubuntu1","2:21.1.3-2ubuntu2","2:21.1.3-2ubuntu2.1","2:21.1.3-2ubuntu2.2","2:21.1.3-2ubuntu2.3","2:21.1.3-2ubuntu2.4","2:21.1.3-2ubuntu2.5","2:21.1.3-2ubuntu2.6","2:21.1.3-2ubuntu2.7","2:21.1.3-2ubuntu2.8","2:21.1.3-2ubuntu2.9","2:21.1.4-2ubuntu1.7~22.04.1","2:21.1.4-2ubuntu1.7~22.04.2","2:21.1.4-2ubuntu1.7~22.04.5","2:21.1.4-2ubuntu1.7~22.04.7","2:21.1.4-2ubuntu1.7~22.04.8","2:21.1.4-2ubuntu1.7~22.04.9","2:21.1.4-2ubuntu1.7~22.04.10","2:21.1.4-2ubuntu1.7~22.04.11","2:21.1.4-2ubuntu1.7~22.04.12","2:21.1.4-2ubuntu1.7~22.04.13","2:21.1.4-2ubuntu1.7~22.04.14","2:21.1.4-2ubuntu1.7~22.04.15","2:21.1.4-2ubuntu1.7~22.04.16"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.1.2-0ubuntu1","2:21.1.3-1","2:21.1.3-1ubuntu1","2:21.1.4-1","2:22.1.0-1","2:22.1.1-1","2:22.1.1-1ubuntu0.1","2:22.1.1-1ubuntu0.2","2:22.1.1-1ubuntu0.3","2:22.1.1-1ubuntu0.4","2:22.1.1-1ubuntu0.5","2:22.1.1-1ubuntu0.6","2:22.1.1-1ubuntu0.7","2:22.1.1-1ubuntu0.9","2:22.1.1-1ubuntu0.10","2:22.1.1-1ubuntu0.11","2:22.1.1-1ubuntu0.12","2:22.1.1-1ubuntu0.13","2:22.1.1-1ubuntu0.14","2:22.1.1-1ubuntu0.15","2:22.1.1-1ubuntu0.17","2:22.1.1-1ubuntu0.18","2:22.1.1-1ubuntu0.19","2:22.1.1-1ubuntu0.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.1.7-3ubuntu2","2:21.1.7-3ubuntu2.1","2:21.1.10-1ubuntu1","2:21.1.11-2ubuntu1","2:21.1.12-1ubuntu1","2:21.1.12-1ubuntu1.1","2:21.1.12-1ubuntu1.2","2:21.1.12-1ubuntu1.3","2:21.1.12-1ubuntu1.4","2:21.1.12-1ubuntu1.5","2:21.1.12-1ubuntu1.6","2:21.1.12-1ubuntu1.8","2:21.1.12-1ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:23.2.0-1","2:23.2.0-1ubuntu0.1","2:23.2.3-1","2:23.2.4-1","2:23.2.4-1build1","2:23.2.4-1build2","2:23.2.4-1build3","2:23.2.6-1","2:23.2.6-1ubuntu0.1","2:23.2.6-1ubuntu0.2","2:23.2.6-1ubuntu0.4","2:23.2.6-1ubuntu0.5","2:23.2.6-1ubuntu0.6","2:23.2.6-1ubuntu0.7","2:23.2.6-1ubuntu0.8"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.1.22-1ubuntu1","2:21.1.22-1ubuntu4","2:21.1.24-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:24.1.10-1","2:24.1.12-1","2:24.1.13-1","2:24.1.14-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.1.18-1ubuntu1","2:21.1.21-1ubuntu1","2:21.1.22-1ubuntu1","2:21.1.22-1ubuntu1.2","2:21.1.22-1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:24.1.6-1ubuntu1","2:24.1.8-1","2:24.1.9-1","2:24.1.10-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.24-2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.13-2.1"}]}],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.6-160000.7.1"}]}],"bundled":12}],"products":[{"vendor":"the xorg project","product":"xorg-x11-server"},{"vendor":"x.org","product":"xorg-x11-server"},{"vendor":"x.org","product":"xwayland"}],"references":[{"url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/37a1847a60c6799aecf163a5cfa40077a9002675","tags":["patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93523","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-2mch-vxw7-ccc2"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-93523","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82015","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-88812","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93521","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93523","tags":["report"]},{"url":"https://bugzilla.redhat.com/2545164","tags":["report"]},{"url":"https://bugzilla.redhat.com/2545174","tags":["report"]},{"url":"https://bugzilla.redhat.com/2545177","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-82015.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:85191","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93516","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93517","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93518","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93519","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93520","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93522","tags":["report"]},{"url":"https://bugzilla.redhat.com/2545161","tags":["report"]},{"url":"https://bugzilla.redhat.com/2545178","tags":["report"]},{"url":"https://bugzilla.redhat.com/2545246","tags":["report"]},{"url":"https://bugzilla.redhat.com/2545860","tags":["report"]},{"url":"https://bugzilla.redhat.com/2545887","tags":["report"]},{"url":"https://bugzilla.redhat.com/2545908","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-85191.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:85193","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-85193.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:86907","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-86907.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89747","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-89747.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-93523","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1792791669.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88812","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93516","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93519","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93521","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93522","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93523.json","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/xorg/xserver","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-93523","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0529.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36467","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/10/07/23","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36488","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93515","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93520","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93524","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4469","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4470","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4471","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545164","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545177","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82015.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-88812","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93521","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93523","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545908","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85191.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93516","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93517","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93518","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93519","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93520","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93522","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85193.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:82015","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:85191","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:85193","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:86907","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:89747","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624230-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1281213","tags":["report"]},{"url":"https://bugzilla.suse.com/1281218","tags":["report"]},{"url":"https://bugzilla.suse.com/1281220","tags":["report"]},{"url":"https://bugzilla.suse.com/1281225","tags":["report"]},{"url":"https://bugzilla.suse.com/1281227","tags":["report"]},{"url":"https://bugzilla.suse.com/1281233","tags":["report"]},{"url":"https://bugzilla.suse.com/1281236","tags":["report"]},{"url":"https://bugzilla.suse.com/1281238","tags":["report"]},{"url":"https://bugzilla.suse.com/1281240","tags":["report"]},{"url":"https://bugzilla.suse.com/1281241","tags":["report"]},{"url":"https://bugzilla.suse.com/1281242","tags":["report"]},{"url":"https://bugzilla.suse.com/1281244","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-88812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93536","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264636-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264645-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264646-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264647-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264663-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264835-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-93523","tags":["report"]},{"url":"https://lists.x.org/archives/xorg-announce/2026-October/003747.html","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-93523","title":"X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","status":"published","published":"2026-10-28T16:16:42.058Z","modified":"2026-11-07T04:55:55.144Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-07T05:32:42.683254Z"}],"euvd":[{"id":"EUVD-2026-112256","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","status":"published","published":"2026-10-28T16:16:42Z","modified":"2026-11-07T04:55:55Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-07T06:08:30.731226Z"}],"ghsa":[{"id":"GHSA-2mch-vxw7-ccc2","title":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier...","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","status":"published","published":"2026-10-28T18:32:10Z","modified":"2026-10-28T18:32:15Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:14:35.861264Z"}],"nvd":[{"id":"CVE-2026-93523","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","status":"published","published":"2026-10-28T17:18:53.22Z","modified":"2026-11-07T05:19:02.66Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-06T22:02:15.550386Z"}],"osv":[{"id":"ALPINE-CVE-2026-93523","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","status":"published","published":"2026-10-28T17:18:53.22Z","modified":"2026-11-03T06:33:04.714375515Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:15:37.282377Z"},{"id":"BELL-CVE-2026-93523","status":"published","published":"2026-10-08T17:21:32.982413Z","modified":"2026-10-30T07:15:04.379147272Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:27.164451Z"},{"id":"CVE-2026-93523","title":"X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","status":"published","published":"2026-10-28T16:16:42.058Z","modified":"2026-11-08T07:14:04.008256269Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-07T11:15:38.581573Z"},{"id":"DEBIAN-CVE-2026-93523","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","status":"published","published":"2026-10-28T17:18:53.22Z","modified":"2026-11-07T09:47:32.170267489Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"OESA-2026-4468","title":"xorg-x11-server security update","description":"X.Org X11 X server\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension (XKB) geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can exploit this vulnerability by sending a specially crafted request to the display server. This can cause memory corruption, potentially resulting in a Denial of Service (DoS) or arbitrary code execution with elevated privileges. (From Red Hat.)(CVE-2026-88812)\n\nA flaw was found in xorg-x11-server. A use-after-free vulnerability, where the application accesses memory after it has already been released, occurs in the Present extension because window notification entries are not properly unlinked before cleaning up window resources. An authenticated local X client can exploit this flaw by creating cross-window notifications and subsequently destroying the target window. Successful exploitation primarily results in a Denial of Service (DoS) via an X server crash, and may potentially lead to information disclosure.(CVE-2026-93515)\n\nA flaw was found in xorg-x11-server. A local user can exploit a use-after-free condition—where the software attempts to access memory after it has been freed—by establishing a passive input grab and removing an input device. When subsequent input events are processed, the server dereferences the dangling device pointer. This flaw can lead to arbitrary code execution or a Denial of Service (DoS) via an X server crash.(CVE-2026-93516)\n\nA flaw was found in xorg-x11-server. The GLX (OpenGL Extension to the X Window System) interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially crafted request, triggering a heap-based buffer overflow. Successful exploitation can result in arbitrary code execution with the privileges of the X server or cause a Denial of Service (DoS) by crashing the application. (From Red Hat.)(CVE-2026-93517)\n\nA flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension (XKB), the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially crafted XKB requests, causing a heap-based buffer overflow. This can result in arbitrary code execution or a denial of service (DoS). (From Red Hat.)(CVE-2026-93518)\n\nInput_constrain_cursor() writes barrier events into a fixed-size buffer without checking bounds. When more than 100 pointer barriers are active, the writes overflow the fixed buffer on the stack or heap. An authenticated X client can trigger this by creating more than 100 pointer barriers (using the XFIXES extension) and then generating pointer motion events (e.g. via XTEST). Both extensions are enabled by default.(CVE-2026-93519)\n\nA flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.(CVE-2026-93520)\n\nA flaw was found in xorg-x11-server. The X server incorrectly calculates buffer sizes and memory offsets when prepending or appending data to RandR (Resize and Rotate extension) provider properties. A local attacker can exploit this vulnerability by sending specially crafted property update requests, causing memory corruption. This flaw could allow an attacker to escalate privileges or cause a denial of service (DoS) by crashing the X server.(CVE-2026-93521)\n\nA flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that can lead to a denial of service (DoS) or potential arbitrary code execution.(CVE-2026-93523)\n\nA flaw was found in xorg-x11-server. An authenticated local user can trigger an out-of-bounds heap memory read by sending specially crafted X Keyboard Extension (XKB) requests with inconsistent key range parameters. This flaw leads to information disclosure, allowing the user to read sensitive data from the server\u0026apos;s heap memory.(CVE-2026-93524)","status":"published","published":"2026-10-22T14:35:30Z","modified":"2026-10-22T14:45:09.84484899Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4469","title":"xorg-x11-server security update","description":"X.Org X11 X server\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension (XKB) geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can exploit this vulnerability by sending a specially crafted request to the display server. This can cause memory corruption, potentially resulting in a Denial of Service (DoS) or arbitrary code execution with elevated privileges. (From Red Hat.)(CVE-2026-88812)\n\nA flaw was found in xorg-x11-server. A use-after-free vulnerability, where the application accesses memory after it has already been released, occurs in the Present extension because window notification entries are not properly unlinked before cleaning up window resources. An authenticated local X client can exploit this flaw by creating cross-window notifications and subsequently destroying the target window. Successful exploitation primarily results in a Denial of Service (DoS) via an X server crash, and may potentially lead to information disclosure.(CVE-2026-93515)\n\nA flaw was found in xorg-x11-server. A local user can exploit a use-after-free condition—where the software attempts to access memory after it has been freed—by establishing a passive input grab and removing an input device. When subsequent input events are processed, the server dereferences the dangling device pointer. This flaw can lead to arbitrary code execution or a Denial of Service (DoS) via an X server crash.(CVE-2026-93516)\n\nA flaw was found in xorg-x11-server. The GLX (OpenGL Extension to the X Window System) interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially crafted request, triggering a heap-based buffer overflow. Successful exploitation can result in arbitrary code execution with the privileges of the X server or cause a Denial of Service (DoS) by crashing the application. (From Red Hat.)(CVE-2026-93517)\n\nA flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension (XKB), the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially crafted XKB requests, causing a heap-based buffer overflow. This can result in arbitrary code execution or a denial of service (DoS). (From Red Hat.)(CVE-2026-93518)\n\nInput_constrain_cursor() writes barrier events into a fixed-size buffer without checking bounds. When more than 100 pointer barriers are active, the writes overflow the fixed buffer on the stack or heap. An authenticated X client can trigger this by creating more than 100 pointer barriers (using the XFIXES extension) and then generating pointer motion events (e.g. via XTEST). Both extensions are enabled by default.(CVE-2026-93519)\n\nA flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.(CVE-2026-93520)\n\nA flaw was found in xorg-x11-server. The X server incorrectly calculates buffer sizes and memory offsets when prepending or appending data to RandR (Resize and Rotate extension) provider properties. A local attacker can exploit this vulnerability by sending specially crafted property update requests, causing memory corruption. This flaw could allow an attacker to escalate privileges or cause a denial of service (DoS) by crashing the X server.(CVE-2026-93521)\n\nA flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that can lead to a denial of service (DoS) or potential arbitrary code execution.(CVE-2026-93523)\n\nA flaw was found in xorg-x11-server. An authenticated local user can trigger an out-of-bounds heap memory read by sending specially crafted X Keyboard Extension (XKB) requests with inconsistent key range parameters. This flaw leads to information disclosure, allowing the user to read sensitive data from the server\u0026apos;s heap memory.(CVE-2026-93524)","status":"published","published":"2026-10-22T14:35:31Z","modified":"2026-10-22T14:45:10.49018234Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4470","title":"xorg-x11-server security update","description":"X.Org X11 X server\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension (XKB) geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can exploit this vulnerability by sending a specially crafted request to the display server. This can cause memory corruption, potentially resulting in a Denial of Service (DoS) or arbitrary code execution with elevated privileges. (From Red Hat.)(CVE-2026-88812)\n\nA flaw was found in xorg-x11-server. A use-after-free vulnerability, where the application accesses memory after it has already been released, occurs in the Present extension because window notification entries are not properly unlinked before cleaning up window resources. An authenticated local X client can exploit this flaw by creating cross-window notifications and subsequently destroying the target window. Successful exploitation primarily results in a Denial of Service (DoS) via an X server crash, and may potentially lead to information disclosure.(CVE-2026-93515)\n\nA flaw was found in xorg-x11-server. A local user can exploit a use-after-free condition—where the software attempts to access memory after it has been freed—by establishing a passive input grab and removing an input device. When subsequent input events are processed, the server dereferences the dangling device pointer. This flaw can lead to arbitrary code execution or a Denial of Service (DoS) via an X server crash.(CVE-2026-93516)\n\nA flaw was found in xorg-x11-server. The GLX (OpenGL Extension to the X Window System) interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially crafted request, triggering a heap-based buffer overflow. Successful exploitation can result in arbitrary code execution with the privileges of the X server or cause a Denial of Service (DoS) by crashing the application. (From Red Hat.)(CVE-2026-93517)\n\nA flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension (XKB), the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially crafted XKB requests, causing a heap-based buffer overflow. This can result in arbitrary code execution or a denial of service (DoS). (From Red Hat.)(CVE-2026-93518)\n\nInput_constrain_cursor() writes barrier events into a fixed-size buffer without checking bounds. When more than 100 pointer barriers are active, the writes overflow the fixed buffer on the stack or heap. An authenticated X client can trigger this by creating more than 100 pointer barriers (using the XFIXES extension) and then generating pointer motion events (e.g. via XTEST). Both extensions are enabled by default.(CVE-2026-93519)\n\nA flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.(CVE-2026-93520)\n\nA flaw was found in xorg-x11-server. The X server incorrectly calculates buffer sizes and memory offsets when prepending or appending data to RandR (Resize and Rotate extension) provider properties. A local attacker can exploit this vulnerability by sending specially crafted property update requests, causing memory corruption. This flaw could allow an attacker to escalate privileges or cause a denial of service (DoS) by crashing the X server.(CVE-2026-93521)\n\nA flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that can lead to a denial of service (DoS) or potential arbitrary code execution.(CVE-2026-93523)\n\nA flaw was found in xorg-x11-server. An authenticated local user can trigger an out-of-bounds heap memory read by sending specially crafted X Keyboard Extension (XKB) requests with inconsistent key range parameters. This flaw leads to information disclosure, allowing the user to read sensitive data from the server\u0026apos;s heap memory.(CVE-2026-93524)","status":"published","published":"2026-10-22T14:35:31Z","modified":"2026-10-22T14:45:09.841281428Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4471","title":"xorg-x11-server security update","description":"X.Org X11 X server\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension (XKB) geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can exploit this vulnerability by sending a specially crafted request to the display server. This can cause memory corruption, potentially resulting in a Denial of Service (DoS) or arbitrary code execution with elevated privileges. (From Red Hat.)(CVE-2026-88812)\n\nA flaw was found in xorg-x11-server. A use-after-free vulnerability, where the application accesses memory after it has already been released, occurs in the Present extension because window notification entries are not properly unlinked before cleaning up window resources. An authenticated local X client can exploit this flaw by creating cross-window notifications and subsequently destroying the target window. Successful exploitation primarily results in a Denial of Service (DoS) via an X server crash, and may potentially lead to information disclosure.(CVE-2026-93515)\n\nA flaw was found in xorg-x11-server. A local user can exploit a use-after-free condition—where the software attempts to access memory after it has been freed—by establishing a passive input grab and removing an input device. When subsequent input events are processed, the server dereferences the dangling device pointer. This flaw can lead to arbitrary code execution or a Denial of Service (DoS) via an X server crash.(CVE-2026-93516)\n\nA flaw was found in xorg-x11-server. The GLX (OpenGL Extension to the X Window System) interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially crafted request, triggering a heap-based buffer overflow. Successful exploitation can result in arbitrary code execution with the privileges of the X server or cause a Denial of Service (DoS) by crashing the application. (From Red Hat.)(CVE-2026-93517)\n\nA flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension (XKB), the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially crafted XKB requests, causing a heap-based buffer overflow. This can result in arbitrary code execution or a denial of service (DoS). (From Red Hat.)(CVE-2026-93518)\n\nInput_constrain_cursor() writes barrier events into a fixed-size buffer without checking bounds. When more than 100 pointer barriers are active, the writes overflow the fixed buffer on the stack or heap. An authenticated X client can trigger this by creating more than 100 pointer barriers (using the XFIXES extension) and then generating pointer motion events (e.g. via XTEST). Both extensions are enabled by default.(CVE-2026-93519)\n\nA flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.(CVE-2026-93520)\n\nA flaw was found in xorg-x11-server. The X server incorrectly calculates buffer sizes and memory offsets when prepending or appending data to RandR (Resize and Rotate extension) provider properties. A local attacker can exploit this vulnerability by sending specially crafted property update requests, causing memory corruption. This flaw could allow an attacker to escalate privileges or cause a denial of service (DoS) by crashing the X server.(CVE-2026-93521)\n\nA flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that can lead to a denial of service (DoS) or potential arbitrary code execution.(CVE-2026-93523)\n\nA flaw was found in xorg-x11-server. An authenticated local user can trigger an out-of-bounds heap memory read by sending specially crafted X Keyboard Extension (XKB) requests with inconsistent key range parameters. This flaw leads to information disclosure, allowing the user to read sensitive data from the server\u0026apos;s heap memory.(CVE-2026-93524)","status":"published","published":"2026-10-22T14:35:32Z","modified":"2026-10-22T14:45:10.486928551Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"RHSA-2026:82015","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2026-10-14T10:32:39Z","modified":"2026-10-20T10:16:56Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:85191","title":"Red Hat Security Advisory: xorg-x11-server-Xwayland security update","status":"published","published":"2026-10-20T10:17:59Z","modified":"2026-10-20T10:31:43.071644273Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:85193","title":"Red Hat Security Advisory: xorg-x11-server-Xwayland security update","status":"published","published":"2026-10-20T10:17:59Z","modified":"2026-10-20T10:31:43.06822711Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:82015","title":"Important: xorg-x11-server security update","description":"X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n\n* xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n\n* xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-14T06:30:05.473043Z","modified":"2026-10-14T07:00:02.775656059Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:85191","title":"Important: xorg-x11-server-Xwayland security update","description":"Xwayland is an X server for running X clients under Wayland.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)\n\n* xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n\n* xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n\n* xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n\n* xorg-x11-server: glamor: size tmp_bits buffer for source coordinate  range in upload_boxes (CVE-2026-93522)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-20T12:10:14.939262Z","modified":"2026-10-20T12:15:37.991033197Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:85193","title":"Important: xorg-x11-server-Xwayland security update","description":"Xwayland is an X server for running X clients under Wayland.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)\n\n* xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n\n* xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n\n* xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n\n* xorg-x11-server: glamor: size tmp_bits buffer for source coordinate  range in upload_boxes (CVE-2026-93522)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-20T12:05:07.452289Z","modified":"2026-10-20T12:15:38.495025733Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:86907","title":"Important: xorg-x11-server-Xwayland security update","description":"Xwayland is an X server for running X clients under Wayland.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)\n\n* xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n\n* xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n\n* xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-22T00:01:17.335044Z","modified":"2026-10-22T00:30:02.618120164Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:89747","title":"Important: xorg-x11-server security update","description":"X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)\n\n* xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n\n* xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n\n* xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-27T12:01:24.400471Z","modified":"2026-10-27T12:30:03.128715766Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2026-93523","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","status":"published","published":"2026-10-28T17:18:00Z","modified":"2026-11-05T11:46:22.54824278Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T13:30:15.321876Z"},{"id":"ALSA-2026:82015","title":"Important: xorg-x11-server security update","description":"X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  \n\nSecurity Fix(es):  \n\n  * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n  * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n  * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-13T00:00:00Z","modified":"2026-10-29T11:32:38.471595169Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:85191","title":"Important: xorg-x11-server-Xwayland security update","description":"Xwayland is an X server for running X clients under Wayland.  \n\nSecurity Fix(es):  \n\n  * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)\n  * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n  * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n  * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n  * xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)\n  * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-19T00:00:00Z","modified":"2026-10-29T11:31:02.271233922Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:85193","title":"Important: xorg-x11-server-Xwayland security update","description":"Xwayland is an X server for running X clients under Wayland.  \n\nSecurity Fix(es):  \n\n  * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)\n  * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n  * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n  * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n  * xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)\n  * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-19T00:00:00Z","modified":"2026-10-29T11:32:38.188331924Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:86907","title":"Important: xorg-x11-server-Xwayland security update","description":"Xwayland is an X server for running X clients under Wayland.  \n\nSecurity Fix(es):  \n\n  * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)\n  * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n  * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n  * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)\n  * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-21T00:00:00Z","modified":"2026-10-29T11:02:25.351674165Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:89747","title":"Important: xorg-x11-server security update","description":"X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  \n\nSecurity Fix(es):  \n\n  * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)\n  * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n  * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n  * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)\n  * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)\n  * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-10-29T11:02:25.481894791Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"AZL-111464","title":"CVE-2026-93523 affecting package xorg-x11-server 1.20.10-6","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","status":"published","published":"2026-10-28T17:18:53Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:18.705965Z"},{"id":"AZL-111497","title":"CVE-2026-93523 affecting package wayland 1.22.0-1","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","status":"published","published":"2026-10-28T17:18:53Z","modified":"2026-11-03T05:33:06Z","updated_at":"2026-11-05T16:41:18.705965Z"},{"id":"AZL-112279","title":"CVE-2026-93523 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1","description":"A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.","status":"published","published":"2026-10-28T17:18:53Z","modified":"2026-11-02T14:17:42.214187686Z","updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"CLSA-2026-1792791669","title":"xorg-x11-server-Xwayland: Fix of 8 CVEs","description":"- CVE-2026-88812: Use-after-free/double free in XKB _CheckSetDoodad:\n  doodad text pointer left dangling after free when reading the font\n  string fails\n- CVE-2026-93516: Use-after-free in DIX: passive grabs keep dangling\n  pointers to a removed input device (grab-\u003edevice / modifierDevice)\n- CVE-2026-93517: Out-of-bounds read in GLX RenderLarge: dataBytes of\n  the first request not validated against the request length\n- CVE-2026-93518: Heap buffer overflow in XKB key resize: 16-bit\n  size_syms/num_syms/size_acts/num_acts truncate computed sizes,\n  undersizing allocations\n- CVE-2026-93519: Out-of-bounds write in XInput barrier handling:\n  input_constrain_cursor writes barrier events without a bounds check\n- CVE-2026-93521: Heap memory corruption in RandR\n  RRChangeProviderProperty PrependMode due to wrong size and offset when\n  shifting old data\n- CVE-2026-93522: Heap buffer overflow in glamor_upload_boxes: tmp_bits\n  sized from pixmap height, not the source coordinate range\n- CVE-2026-93523: Out-of-bounds access in XInput\n  ProcXIPassiveUngrabDevice: client-supplied modifier values are not\n  validated","status":"published","published":"2026-10-23T21:41:29Z","modified":"2026-10-26T09:31:37.102994719Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"MGASA-2026-0529","title":"Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs","description":"XKB SetGeometry TextDoodad Double Free. (CVE-2026-88812)\nPresent Extension Cross-Window Notify Use-After-Free. (CVE-2026-93515)\nXInput Passive Grab modifierDevice Use-After-Free. (CVE-2026-93516)\nGLX RenderLarge Heap Buffer Overflow. (CVE-2026-93517)\nXKB ResizeKeyType Numeric Truncation. (CVE-2026-93518)\nXFixes Pointer Barrier Event List Buffer Overflow. (CVE-2026-93519)\nXKB ChangeKeycodeRange Heap Out-of-Bounds Write. (CVE-2026-93520)\nRandR ChangeProviderProperty Heap Buffer Overflow. (CVE-2026-93521)\nGlamor CopyArea CPU-FBO Heap Buffer Overflow. (CVE-2026-93522)\nXInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write.\n(CVE-2026-93523)\nXKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read.\n(CVE-2026-93524)\nGestureBuildSprite Use-After-Free. (CVE-2026-93536)\n","status":"published","published":"2026-10-20T15:57:48Z","modified":"2026-10-20T16:00:04.492555526Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:12104-1","title":"xorg-x11-server-21.1.24-2.1 on GA media","description":"These are all security issues fixed in the xorg-x11-server-21.1.24-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-10T00:00:00Z","modified":"2026-10-11T12:45:03.870246633Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:12105-1","title":"xwayland-24.1.13-2.1 on GA media","description":"These are all security issues fixed in the xwayland-24.1.13-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-10T00:00:00Z","modified":"2026-10-11T12:45:03.870211777Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:22085-1","title":"Security update for xwayland","description":"This update for xwayland fixes the following issues:\n\n- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).\n- CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).\n- CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).\n- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).\n- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).\n- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).\n- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).\n- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).\n- CVE-2026-93522: Glamor CopyArea Heap Buffer Overflow (bsc#1281240).\n- CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).\n- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).\n- CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244).\n","status":"published","published":"2026-10-12T08:18:23Z","modified":"2026-10-19T17:23:13.53783248Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:24230-1","title":"Security update for xwayland","description":"This update for xwayland fixes the following issues:\n\n- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).\n- CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).\n- CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).\n- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).\n- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).\n- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).\n- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).\n- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).\n- CVE-2026-93522: Glamor CopyArea Heap Buffer Overflow (bsc#1281240).\n- CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).\n- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).\n- CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244).\n","status":"published","published":"2026-10-12T08:18:20Z","modified":"2026-10-21T17:23:11.149658668Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4636-1","title":"Security update for xorg-x11-server","description":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).\n- CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).\n- CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).\n- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).\n- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).\n- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).\n- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).\n- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).\n- CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).\n- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).\n","status":"published","published":"2026-10-13T07:43:08Z","modified":"2026-10-13T17:23:11.263380542Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4645-1","title":"Security update for xorg-x11-server","description":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).\n- CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).\n- CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).\n- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).\n- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).\n- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).\n- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).\n- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).\n- CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).\n- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).\n- CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244).\n","status":"published","published":"2026-10-13T16:47:51Z","modified":"2026-10-14T17:30:07.613752377Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4646-1","title":"Security update for xorg-x11-server","description":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).\n- CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).\n- CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).\n- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).\n- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).\n- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).\n- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).\n- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).\n- CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).\n- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).\n- CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244).\n","status":"published","published":"2026-10-13T16:48:18Z","modified":"2026-10-14T17:30:07.610533914Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4647-1","title":"Security update for xorg-x11-server","description":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).\n- CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).\n- CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).\n- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).\n- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).\n- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).\n- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).\n- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).\n- CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).\n- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).\n- CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244).\n","status":"published","published":"2026-10-13T16:48:49Z","modified":"2026-10-14T17:30:08.563766381Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4663-1","title":"Security update for xorg-x11-server","description":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).\n- CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).\n- CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).\n- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).\n- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).\n- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).\n- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).\n- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).\n- CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).\n- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).\n","status":"published","published":"2026-10-14T11:34:16Z","modified":"2026-10-14T17:30:08.607530662Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4835-1","title":"Security update for xwayland","description":"This update for xwayland fixes the following issues:\n\n- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).\n- CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).\n- CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).\n- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).\n- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).\n- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).\n- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).\n- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).\n- CVE-2026-93522: Glamor CopyArea Heap Buffer Overflow (bsc#1281240).\n- CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).\n- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).\n- CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244).\n","status":"published","published":"2026-10-21T12:51:34Z","modified":"2026-10-22T11:45:03.857231817Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}