X.org X11 vulnerabilities

• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write CVE-2026-93523 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server Glamor CopyArea Heap Buffer Overflow CVE-2026-93522 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow CVE-2026-93521 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more .Org Server XInput Passive Grab Use-After-Free CVE-2026-93516 Fix available 5.5 MediumOctober 8, 2026
• the xorg project xorg-x11-server, x.org xwayland +1 more X.Org Server XKB SetGeometry TextDoodad Double Free CVE-2026-88812 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server GestureBuildSprite Use-After-Free CVE-2026-93536 Fix available 5.3 MediumOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read CVE-2026-93524 Fix available 6.9 MediumOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write CVE-2026-93520 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server XFixes Pointer Barrier Event List Buffer Overflow CVE-2026-93519 Fix available 7.8 HighOctober 8, 2026
• x.org xwayland, the xorg project xorg-x11-server +1 more X.Org Server XKB ResizeKeyType Numeric Truncation CVE-2026-93518 Fix available 7.8 HighOctober 8, 2026
• the xorg project xorg-x11-server, x.org xwayland +1 more .Org Server Present Extension Use-After-Free CVE-2026-93515 Fix available 6.8 MediumOctober 8, 2026
• the x11 project libx11 Out-of-bounds read in libX11's byte-oriented codeset parser CVE-2026-94285 Fix available 5.1 MediumSeptember 28, 2026
• the x11 project libx11 Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser CVE-2026-94284 Fix available 5.5 MediumSeptember 28, 2026
• the x11 project libx11 Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser CVE-2026-94283 Fix available 6.5 MediumSeptember 28, 2026
• the x11 project libx11 libX11 XkbGetMap Reply Heap-based Buffer Overflow CVE-2026-88806 Fix available 7.5 HighSeptember 21, 2026
• the xorg project xorg-x11-server, x.org x server, xwayland +2 more xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() CVE-2026-56000 Fix available 9.0 CriticalJuly 8, 2026
• x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 more Libx11: integer overflow in xcreateimage() leading to a heap overflow CVE-2023-43787 Fix available 7.8 HighOctober 3, 2023
• x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 more Libx11: stack exhaustion from infinite recursion in putsubimage() CVE-2023-43786 Public exploitFix available 5.5 MediumOctober 3, 2023
• x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 more Libx11: out-of-bounds memory access in _xkbreadkeysyms() CVE-2023-43785 Fix available 6.5 MediumOctober 3, 2023
• the x11 project libx11, redhat enterprise linux +1 more A vulnerability was found in libX11. The security flaw occurs because the functions in src... CVE-2023-3138 Fix available 7.5 HighJune 15, 2023
• x.org libx11, fedoraproject fedora, x.org x window system +2 more LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to... CVE-2021-31535 Fix available EPSS 10.4% 9.8 CriticalMay 18, 2021
• the x11 project libx11, fedoraproject fedora +1 more An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows... CVE-2020-14363 Fix available 7.8 HighAugust 25, 2020
• the x11 project libx11, canonical ubuntu linux, fedoraproject fedora +1 more +3 more An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM)... CVE-2020-14344 Fix available 6.7 MediumAugust 4, 2020
• x.org libx11, canonical ubuntu linux, debian linux +2 more An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c... CVE-2018-14600 Fix available 9.8 CriticalAugust 24, 2018
• x.org libx11, canonical ubuntu linux, debian linux +4 more +6 more An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is... CVE-2018-14599 Fix available 9.8 CriticalAugust 24, 2018
• x.org libx11, canonical ubuntu linux, debian linux +1 more +3 more An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious... CVE-2018-14598 Fix available 7.5 HighAugust 24, 2018
• x.org libx11, fedoraproject fedora +1 more The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain... CVE-2016-7943 Fix available 9.8 CriticalOctober 27, 2016
• x.org libx11, fedoraproject fedora +1 more The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain... CVE-2016-7942 Fix available 9.8 CriticalOctober 12, 2016
• x.org libx11, x11, canonical ubuntu linux +1 more +3 more Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint... CVE-2013-7439 Fix available 7.5 HighApril 9, 2015
• x.org x11, debian linux, x.org x server +2 more The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System ... CVE-2014-8102 Fix available 6.5 MediumJune 27, 2014
• x.org x11, xfree86, x server +2 more The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org... CVE-2014-8101 Fix available 6.5 MediumJune 27, 2014
• x.org x11, xfree86, x server +2 more The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org... CVE-2014-8100 Fix available 6.5 MediumJune 27, 2014
• x.org x11, xfree86, x server +2 more The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org... CVE-2014-8099 Fix available 6.5 MediumJune 27, 2014
• x.org x11, xfree86, debian linux +1 more +3 more The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server ... CVE-2014-8098 Fix available 6.5 MediumJune 27, 2014
• x.org x11, x server +1 more The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver... CVE-2014-8097 Fix available 6.5 MediumJune 27, 2014
• x.org x11, debian linux, x.org x server +2 more The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or... CVE-2014-8096 Fix available 6.5 MediumJune 27, 2014
• x.org x11, debian linux, x.org x server +2 more The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver... CVE-2014-8095 Fix available 6.5 MediumJune 27, 2014
• x.org x11, xfree86, x server +2 more Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or... CVE-2014-8093 Fix available 6.5 MediumJune 27, 2014
• x.org x11, x server +1 more Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka... CVE-2014-8092 Fix available 6.5 MediumJune 27, 2014
• x.org x11, x server +1 more X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before... CVE-2014-8091 Fix available 4.3 MediumJune 27, 2014
• x.org x11 Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11... CVE-2012-2118 Fix available 10.0 HighMay 18, 2012
• sun opensolaris, solaris, x.org x11 +2 more xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10, OpenSolaris snv_109 through... CVE-2009-3100 4.0 MediumSeptember 8, 2009
• sun opensolaris, solaris, x.org x11 +2 more XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8,... CVE-2009-2711 4.9 MediumAugust 7, 2009
• x.org x11 Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension... CVE-2007-1003 Fix available 9.0 HighApril 6, 2007
• x.org libx11, canonical ubuntu linux, debian linux +2 more Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3... CVE-2007-1667 Fix available 9.3 HighMarch 24, 2007
• x.org libx11 The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for... CVE-2006-5397 Fix available 2.1 LowNovember 3, 2006
• x.org xdm, xf86dga, xinit +6 more +8 more X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not... CVE-2006-4447 Fix available 7.2 HighAugust 30, 2006
• x.org x11r6 Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows... CVE-2006-1526 Fix available 2.1 LowMay 2, 2006
• x.org x11r6, x11r7, mandrakesoft mandrake linux +3 more +5 more X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the... CVE-2006-0745 Public exploitFix available 7.2 HighMarch 21, 2006
• altlinux alt linux, lesstif, mandrakesoft mandrake linux +7 more +9 more scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value... CVE-2005-0605 Fix available 7.5 HighMarch 2, 2005
• Show olderLoading…