Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Priority LOW 23

A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X serv…

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00166 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 30

A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information from X server memory or potentially crash the…

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00177 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-126
Priority LOW 35

A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or poten…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00202 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 35

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute cod…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00202 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 33

A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00202 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 35

A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00202 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 35

A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X ser…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00202 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 35

An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potent…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00202 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-122
Priority LOW 24

A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X Clients to crash the X se…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00192 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-416
Priority LOW 29

A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malicious X clients to crash or potentially execute code in the X server context.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00194 Published 2026-10-28 Partial fix · 21.1.25, 24.1.14 CWE-416