Priority LOW 39
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00333 · Published 2026-07-08 · Fixed in 21.1.24, 24.1.13 CWE-122
Priority MEDIUM 41
Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentiall…
CVSS 4.0CRITICAL 9.0· Network · Low privileges · No interaction · EPSS 0.00308 · Published 2026-07-08 · Partial fix · 21.1.24, 24.1.13 CWE-416
Priority LOW 24
A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow().
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00141 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416
Priority LOW 24
An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes().
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00132 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-125
Priority LOW 35
An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00148 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +25 CWE-787
Priority LOW 35
A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00154 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416
Priority LOW 35
A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00154 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416
Priority LOW 35
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00161 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-121
Priority LOW 35
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-121
Priority LOW 35
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00157 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-121
Priority LOW 35
A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00142 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416
Priority LOW 34
A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00282 · Published 2025-10-30 · Partial fix · 24.1.9, 24.1.5-5.el10_0 +32 CWE-416
Priority LOW 34
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2025-10-30 · Partial fix · 24.1.9, 24.1.5-5.el10_0 +32 CWE-190
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416
Priority LOW 36
An access to an uninitialized pointer flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00405 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-824
Priority LOW 36
An out-of-bounds write flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00405 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-787
Priority LOW 36
A buffer overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00444 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-119
Priority LOW 36
A heap overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-787
Priority LOW 36
A buffer overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-121
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416
Priority LOW 39
An out-of-bounds memory access flaw was found in the X.Org server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01229 · Published 2024-02-09 · Partial fix · 21.1.11, 1.1.0-25.el6_10.13 +14 CWE-787
Priority LOW 34
A flaw was found in the X.Org server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00356 · Published 2024-01-18 · Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-787
Priority LOW 25
A flaw was found in the X.Org server.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00321 · Published 2024-01-18 · Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-158
Priority MEDIUM 46
A flaw was found in X.Org server.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02106 · Published 2024-01-18 · Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-787
Load more
THREATIST.IORead the docs