X.org vulnerabilities

Products

• X Server 97
• Xwayland 48
• Libx11 19
• X11 18
• Libxi 14
• Xorg-x11-server 12
• X11r6 8
• X.org 7
• Libxpm 6
• Xserver 6
• Xfree86 5
• Libxfont 4
• Libxfont2 4
• Xorg-server 4
• Libxrender 3
• Libxtst 3
• Server 3
• Libxrandr 2
• Libxv 2
• X11r7 2
• Xdm 2
• X Font Server 2
• X Window System 2

Newest

• x.org libxi libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow CVE-2026-109090 Fix available 7.5 HighOctober 16, 2026
• x.org libxi libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow CVE-2026-109089 Fix available 7.5 HighOctober 16, 2026
• x.org libxtst libXtst RECORD EnableContext Reply Endless Loop CVE-2026-109088 Fix available 6.5 MediumOctober 16, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write CVE-2026-93523 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server Glamor CopyArea Heap Buffer Overflow CVE-2026-93522 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow CVE-2026-93521 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more .Org Server XInput Passive Grab Use-After-Free CVE-2026-93516 Fix available 5.5 MediumOctober 8, 2026
• the xorg project xorg-x11-server, x.org xwayland +1 more X.Org Server XKB SetGeometry TextDoodad Double Free CVE-2026-88812 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server GestureBuildSprite Use-After-Free CVE-2026-93536 Fix available 5.3 MediumOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read CVE-2026-93524 Fix available 6.9 MediumOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write CVE-2026-93520 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server XFixes Pointer Barrier Event List Buffer Overflow CVE-2026-93519 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server XKB ResizeKeyType Numeric Truncation CVE-2026-93518 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server GLX RenderLarge Heap Buffer Overflow CVE-2026-93517 Fix available 8.5 HighOctober 8, 2026
• the xorg project xorg-x11-server, x.org xwayland +1 more .Org Server Present Extension Use-After-Free CVE-2026-93515 Fix available 6.8 MediumOctober 8, 2026
• x.org libxtst Out-of-bounds read in libXtst's RECORD reply parser CVE-2026-94286 Fix available 7.1 HighSeptember 28, 2026
• the x11 project libx11 Out-of-bounds read in libX11's byte-oriented codeset parser CVE-2026-94285 Fix available 5.1 MediumSeptember 28, 2026
• the x11 project libx11 Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser CVE-2026-94284 Fix available 5.5 MediumSeptember 28, 2026
• the x11 project libx11 Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser CVE-2026-94283 Fix available 6.5 MediumSeptember 28, 2026
• x.org libxi Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion CVE-2026-94282 Fix available 5.6 MediumSeptember 28, 2026
• x.org libxi Out-of-bounds read in libXi's XListInputDevices() class parsing CVE-2026-94281 Fix available 6.5 MediumSeptember 24, 2026
• x.org libxi Out-of-bounds read in libXi's XListInputDevices() CVE-2026-93545 Fix available 6.5 MediumSeptember 24, 2026
• x.org libxi Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing CVE-2026-93544 Fix available 6.5 MediumSeptember 24, 2026
• x.org libxi Out-of-bounds read in libXi's XI2 class parser CVE-2026-93543 Fix available 7.4 HighSeptember 24, 2026
• x.org libxi Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() CVE-2026-93542 Fix available 6.5 MediumSeptember 24, 2026
• x.org libxi Out-of-bounds read in libXi's XQueryDeviceState() CVE-2026-93541 Fix available 6.5 MediumSeptember 24, 2026
• x.org libxrender libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow CVE-2026-88807 Fix available 8.9 HighSeptember 21, 2026
• the x11 project libx11 libX11 XkbGetMap Reply Heap-based Buffer Overflow CVE-2026-88806 Fix available 7.5 HighSeptember 21, 2026
• libxfont2, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 more fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2 CVE-2026-59679 Fix available 9.2 CriticalAugust 5, 2026
• microsoft libxpm Denial of service via unsigned underflow in libXpm's write path CVE-2026-94287 Fix available 5.5 MediumJuly 28, 2026
• x libxfont, x.org libxfont2 +1 more libXfont2 computeProps Property Buffer Heap Buffer Overflow CVE-2026-56003 Fix available 8.5 HighJuly 8, 2026
• x libxfont, x.org libxfont2 +1 more libXfont2 PCF Font Parsing Heap Buffer Overflow CVE-2026-56002 Fix available 8.5 HighJuly 8, 2026
• x libxfont, x.org libxfont2 +1 more libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 Fix available 8.5 HighJuly 8, 2026
• the xorg project xorg-x11-server, x.org x server, xwayland +2 more xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() CVE-2026-56000 Fix available 9.0 CriticalJuly 8, 2026
• x.org xorg-server, xwayland, x server +2 more xorg-server / xwayland glamor font atlas Heap Buffer Overflow CVE-2026-55999 Fix available 8.5 HighJuly 8, 2026
• x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 more Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() CVE-2026-50263 Fix available 5.5 MediumJune 5, 2026
• x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 more Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes CVE-2026-50262 Fix available 5.5 MediumJune 5, 2026
• x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 more Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat CVE-2026-50264 Fix available 7.8 HighJune 5, 2026
• x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 more Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() CVE-2026-50261 Fix available 7.8 HighJune 5, 2026
• x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 more Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() CVE-2026-50260 Fix available 7.8 HighJune 5, 2026
• x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 more Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing CVE-2026-50259 Fix available 7.8 HighJune 5, 2026
• x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 more Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels CVE-2026-50258 Fix available 7.8 HighJune 5, 2026
• x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 more Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() CVE-2026-50257 Fix available 7.8 HighJune 5, 2026
• x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 more Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch CVE-2026-50256 Fix available 7.8 HighJune 5, 2026
• x.org x server, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 more Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling CVE-2026-34002 Fix available 6.1 MediumApril 14, 2026
• x.org x server, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 more Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. CVE-2026-34000 Fix available 6.1 MediumApril 14, 2026
• x.org x server, debian linux, ibm aix +25 more +27 more Xorg: xmayland: value overflow in xkbsetcompatmap() CVE-2025-62231 Fix available 7.3 HighOctober 28, 2025
• x.org x server, xwayland, debian linux +25 more +27 more Xorg: xwayland: use-after-free in xkb client resource removal CVE-2025-62230 Fix available 7.3 HighOctober 28, 2025
• x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +15 more +17 more Xorg: xmayland: use-after-free in xpresentnotify structure creation CVE-2025-62229 Fix available 7.3 HighOctober 28, 2025
• x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 more Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension CVE-2025-49180 Fix available 7.8 HighJune 17, 2025
• Show olderLoading…