x.org

Records207All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical38CVSS 9.0–10.0

CVSS high99CVSS 7.0–8.9

Exploited now

x.org records in CISA KEV

No x.org vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X Server 97 records MEDIUM Xwayland 29 records MEDIUM X11 18 records MEDIUM Libx11 15 records MEDIUM X11r6 8 records MEDIUM X.org 7 records MEDIUM Xserver 6 records MEDIUM Libxi 5 records LOW

Records

97 records in X Server · all components

TI-2018-10528 CVE-2018-14665 · GHSA-c34f-6cmx-fcvv

A flaw was found in xorg-x11-server before 1.20.3.

MEDIUM 51

A flaw was found in xorg-x11-server before 1.20.3.

CVSS 3.0MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.27241 Published 2018-10-25 Fixed CWE-863

TI-2017-08976 CVE-2017-12186 · GHSA-5m98-6wwr-hv6v

Improper input validation in x.org xorg-x11-server

MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04302 Published 2018-01-24 Partial fix · 1.19.5 CWE-391

TI-2017-08975 CVE-2017-12185 · GHSA-9xvh-p9jr-vrcq

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension…

MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04167 Published 2018-01-24 Will not fix CWE-391

TI-2017-08974 CVE-2017-12184 · GHSA-fgqv-36hw-h8rr

Improper input validation in x.org xorg-x11-server

MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04167 Published 2018-01-24 Partial fix · 1.19.5 CWE-391

TI-2017-08973 CVE-2017-12183 · GHSA-f4jr-cvv4-j93w

Improper input validation in x.org xorg-x11-server

MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04494 Published 2018-01-24 Partial fix · 1.19.5 CWE-391

TI-2017-08972 CVE-2017-12182 · GHSA-p3wf-98jp-r965

Improper input validation in x.org xorg-x11-server

MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04233 Published 2018-01-24 Partial fix · 1.19.5 CWE-391

TI-2017-08971 CVE-2017-12181 · GHSA-v69h-29mg-rp95

Improper input validation in x.org xorg-x11-server

MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04233 Published 2018-01-24 Partial fix · 1.19.5 CWE-391

TI-2017-08970 CVE-2017-12180 · GHSA-xh78-q5hh-9c6h

Improper input validation in x.org xorg-x11-server

MEDIUM 49

xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04494 Published 2018-01-24 Partial fix · 1.19.5 CWE-391

TI-2017-08969 CVE-2017-12179 · GHSA-p644-42g7-jq85

Integer overflow in x.org xorg-x11-server

MEDIUM 49

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0437 Published 2018-01-24 Partial fix · 1.19.5 CWE-391

TI-2017-08968 CVE-2017-12178 · GHSA-7xv3-2rc8-75j5

Improper input validation in x.org xorg-x11-server

MEDIUM 49

xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04423 Published 2018-01-24 Partial fix · 1.19.5 CWE-391

TI-2017-08967 CVE-2017-12177 · GHSA-jwhg-33x6-pr4q

Integer overflow in x.org xorg-x11-server

MEDIUM 49

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0437 Published 2018-01-24 Partial fix · 1.19.5 CWE-391

TI-2017-08966 CVE-2017-12176 · GHSA-mq5f-6g2w-32rq

Improper input validation in x.org xorg-x11-server

MEDIUM 49

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04166 Published 2018-01-24 Partial fix · 1.19.5 CWE-391

TI-2017-08977 CVE-2017-12187 · GHSA-xqjx-gg86-xxx4

Improper input validation in x.org xorg-x11-server

MEDIUM 48

xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03346 Published 2018-01-24 Partial fix · 1.19.5 CWE-391

TI-2007-06133 CVE-2007-6427 · GHSA-r7g2-76rh-rjm8

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to…

MEDIUM 47

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerabili…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04278 Published 2008-01-18 Fixed CWE-787

TI-2023-06228 CVE-2023-6816 · GHSA-pcjv-393q-rqf2

Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer

MEDIUM 46

A flaw was found in X.Org server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02106 Published 2024-01-18 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-787

TI-2022-22887 CVE-2022-46343 · GHSA-cfjv-73gp-92j6

Use after free in xorg-x11-server

MEDIUM 45

A vulnerability was found in X.Org.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02556 Published 2022-12-14 Partial fix CWE-416

TI-2022-22885 CVE-2022-46341 · GHSA-cj4x-645f-6pwx

Out-of-bounds write in xorg-x11-server

MEDIUM 45

A vulnerability was found in X.Org.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02717 Published 2022-12-14 Partial fix CWE-787

TI-2022-22884 CVE-2022-46340 · GHSA-hvwj-m4ph-92v4

Out-of-bounds write in xorg-x11-server

MEDIUM 45

A vulnerability was found in X.Org.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02682 Published 2022-12-14 Partial fix CWE-787

TI-2017-08054 CVE-2017-10971 · GHSA-8jfp-8hq7-6gj5

In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash…

MEDIUM 45

In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03877 Published 2017-07-06 Will not fix CWE-119

TI-2023-05938 CVE-2023-6478 · GHSA-fwrj-5c8f-f8h2

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

MEDIUM 43

A flaw was found in xorg-server.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.01617 Published 2023-12-13 Partial fix · 1.1.0-25.el6_10.13, 1.8.0-28.el7_9 +13 CWE-190

TI-2022-22888 CVE-2022-46344 · GHSA-jjf8-5xjq-fq8j

Out-of-bounds read in xorg-x11-server

MEDIUM 43

A vulnerability was found in X.Org.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02899 Published 2022-12-14 Partial fix CWE-125

TI-2022-22886 CVE-2022-46342 · GHSA-5hp7-2mv5-p69r

Use after free in xorg-x11-server

MEDIUM 43

A vulnerability was found in X.Org.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01414 Published 2022-12-14 Partial fix CWE-416

TI-2022-03269 CVE-2022-3550 · GHSA-h54w-qqq6-jp69

X.org Server xkb.c _GetCountedString buffer overflow

MEDIUM 42

A vulnerability classified as critical was found in X.org Server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02034 Published 2022-10-17 Partial fix CWE-119

TI-2026-40395 CVE-2026-56000 · GHSA-4gcc-rqqq-58jp

xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

MEDIUM 41

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentiall…

CVSS 4.0CRITICAL 9.0 Network Low privileges No interaction EPSS 0.00308 Published 2026-07-08 Partial fix · 21.1.24, 24.1.13 CWE-416

TI-2026-26341 CVE-2026-34002 · GHSA-2q6x-pg74-2276

Xorg: xwayland: x.org x server: information disclosure or denial of service via…

MEDIUM 40

A flaw was found in the X.Org X server.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00489 Published 2026-05-05 Partial fix · 24.1.5-6.el10_0, 1.1.0-25.el6_10.16 +22 CWE-805

Open these records in search →