TI-2023-06228 CVE-2023-6816 · GHSA-pcjv-393q-rqf2
Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer
Priority MEDIUM 46
A flaw was found in X.Org server.
x.org
Records207All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical38CVSS 9.0–10.0
CVSS high99CVSS 7.0–8.9
Exploited now
x.org records in CISA KEVNo x.org vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
29 records in Xwayland · all components
TI-2023-05938 CVE-2023-6478 · GHSA-fwrj-5c8f-f8h2
Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty
Priority MEDIUM 43
A flaw was found in xorg-server.
TI-2026-40395 CVE-2026-56000 · GHSA-4gcc-rqqq-58jp
xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()
Priority MEDIUM 41
Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentiall…
TI-2026-40394 CVE-2026-55999 · GHSA-h655-847g-q4f7
xorg-server / xwayland glamor font atlas Heap Buffer Overflow
Priority LOW 39
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.
TI-2024-00205 CVE-2024-0229 · GHSA-49wx-9h9f-8c9g
Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
Priority LOW 39
An out-of-bounds memory access flaw was found in the X.Org server.
TI-2023-05853 CVE-2023-6377 · GHSA-xp6x-8hgv-x5w5
Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions
Priority LOW 39
A flaw was found in xorg-server.
TI-2025-19539 CVE-2025-26601 · GHSA-gf8x-6jh7-3mjv
Xorg: xwayland: use-after-free in syncinittrigger()
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
TI-2025-19538 CVE-2025-26600 · GHSA-7q4p-93g6-4wf9
Xorg: xwayland: use-after-free in playreleasedevents()
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
TI-2025-19537 CVE-2025-26599 · GHSA-wv34-xcj8-f3mq
Xorg: xwayland: use of uninitialized pointer in compredirectwindow()
Priority LOW 36
An access to an uninitialized pointer flaw was found in X.Org and Xwayland.
TI-2025-19536 CVE-2025-26598 · GHSA-c28h-3w95-v6xg
Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()
Priority LOW 36
An out-of-bounds write flaw was found in X.Org and Xwayland.
TI-2025-19535 CVE-2025-26597 · GHSA-7qjx-378m-p8hm
Xorg: xwayland: buffer overflow in xkbchangetypesofkey()
Priority LOW 36
A buffer overflow flaw was found in X.Org and Xwayland.
TI-2025-19534 CVE-2025-26596 · GHSA-c52f-45m8-h2r6
Xorg: xwayland: heap overflow in xkbwritekeysyms()
Priority LOW 36
A heap overflow flaw was found in X.Org and Xwayland.
TI-2025-19533 CVE-2025-26595 · GHSA-hp9r-wcfh-72pr
Xorg: xwayland: buffer overflow in xkbvmodmasktext()
Priority LOW 36
A buffer overflow flaw was found in X.Org and Xwayland.
TI-2025-19532 CVE-2025-26594 · GHSA-gc32-fmf5-c742
X.org: xwayland: use-after-free of the root cursor
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
TI-2026-37008 CVE-2026-50264 · GHSA-c83q-p66f-qr9p
Out-of-bounds write in Red Hat Enterprise Linux 10
Priority LOW 35
An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat.
TI-2026-37005 CVE-2026-50261 · GHSA-4r2h-m6wp-gxg9
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()
Priority LOW 35
A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter().
TI-2026-37004 CVE-2026-50260 · GHSA-7j37-rf7v-jf5c
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()
Priority LOW 35
A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter().
TI-2026-37003 CVE-2026-50259 · GHSA-7ww4-jpp4-x9fw
Stack-based buffer overflow in Red Hat Enterprise Linux 10
Priority LOW 35
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
TI-2026-37002 CVE-2026-50258 · GHSA-74fp-pmv2-rh3f
Stack-based buffer overflow in Red Hat Enterprise Linux 10
Priority LOW 35
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
TI-2026-37001 CVE-2026-50257 · GHSA-5p7p-jgvj-4v95
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()
Priority LOW 35
A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence().
TI-2026-37000 CVE-2026-50256 · GHSA-7gx3-r5q9-6j33
Stack-based buffer overflow in Red Hat Enterprise Linux 10
Priority LOW 35
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
TI-2023-04938 CVE-2023-5367 · GHSA-q38f-wwqq-rr3v
Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty
Priority LOW 35
A out-of-bounds write flaw was found in the xorg-x11-server.
TI-2025-38541 CVE-2025-62231 · GHSA-h4r4-6hvf-34r8
Xorg: xmayland: value overflow in xkbsetcompatmap()
Priority LOW 34
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow.
TI-2025-38540 CVE-2025-62230 · GHSA-892r-x96w-jh76
Xorg: xwayland: use-after-free in xkb client resource removal
Priority LOW 34
A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup.
TI-2024-00371 CVE-2024-0409 · GHSA-w668-xcxf-v3gg
Xorg-x11-server: selinux context corruption
Priority LOW 34
A flaw was found in the X.Org server.