Read the docs

x.org

Records207All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical38CVSS 9.0–10.0
CVSS high99CVSS 7.0–8.9

Exploited now

x.org records in CISA KEV

No x.org vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
X Server 97 records MEDIUM Xwayland 29 records MEDIUM X11 18 records MEDIUM Libx11 15 records MEDIUM X11r6 8 records MEDIUM X.org 7 records MEDIUM Xserver 6 records MEDIUM Libxi 5 records LOW

Records

18 records in X11 · all components

TI-2012-01891 CVE-2012-2118 · GHSA-wqgf-h892-f3cp

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11…

Priority MEDIUM 48

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input devic…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02659 Published 2012-05-18 No fix listed CWE-20
TI-2013-06091 CVE-2013-7439 · GHSA-rq5m-5v65-q84q

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in…

Priority MEDIUM 40

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which trigger…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04251 Published 2015-04-16 Partial fix CWE-189
TI-2014-06715 CVE-2014-8098 · GHSA-j77w-hrg4-49j3

The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org…

Priority LOW 37

The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds r…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.05192 Published 2014-12-10 Fixed CWE-119
TI-2014-06717 CVE-2014-8100 · GHSA-829w-46r8-7v9x

The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and…

Priority LOW 36

The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bou…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04373 Published 2014-12-10 Fixed CWE-119
TI-2014-06716 CVE-2014-8099 · GHSA-5grc-mxpq-pvhg

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and…

Priority LOW 36

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bou…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04316 Published 2014-12-10 Fixed CWE-119
TI-2014-06713 CVE-2014-8096 · GHSA-cvh9-37c6-rr6p

The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka…

Priority LOW 36

The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04618 Published 2014-12-10 Fixed CWE-119
TI-2014-06712 CVE-2014-8095 · GHSA-pr28-cmcw-r6w2

The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka…

Priority LOW 36

The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write)…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04431 Published 2014-12-10 Fixed CWE-119
TI-2014-06708 CVE-2014-8091 · GHSA-3443-38jq-4qwq

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and…

Priority LOW 27

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SUN-DES-1 (Secure RPC) authentication credentials, does not check the return value of a malloc call, wh…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04189 Published 2014-12-10 Fixed
TI-2009-02589 CVE-2009-2711 · GHSA-xxfr-xhcv-m89f

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for…

Priority LOW 23

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00393 Published 2009-08-07 No fix listed CWE-200
Open these records in search →