Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 211

Export CSV
CVE-2026-94286

Out-of-bounds read in libXtst's RECORD reply parser

An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxtst
CVE-2026-94285

Out-of-bounds read in libX11's byte-oriented codeset parser

An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libx11
CVE-2026-94284

Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser

An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libx11
CVE-2026-94283

Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser

An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libx11
CVE-2026-94287

Denial of service via unsigned underflow in libXpm's write path

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxpm
CVE-2026-93541

Out-of-bounds read in libXi's XQueryDeviceState()

An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-93545

Out-of-bounds read in libXi's XListInputDevices()

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-93542

Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()

An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-93543

Out-of-bounds read in libXi's XI2 class parser

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-93544

Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-94281

Out-of-bounds read in libXi's XListInputDevices() class parsing

An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxi
CVE-2026-88806

libX11 XkbGetMap Reply Heap-based Buffer Overflow

A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libx11
CVE-2026-88807

libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

CVSS 4.0 · 8.9 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxrender
CVE-2026-56000

xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

CVSS 4.0 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
X.org
Products
X Server Xorg-server Xwayland
CVE-2026-56001

libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
X X.org
Products
Libxfont Libxfont
CVE-2026-56002

libXfont2 PCF Font Parsing Heap Buffer Overflow

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
X X.org
Products
Libxfont Libxfont Libxfont2
CVE-2026-56003

libXfont2 computeProps Property Buffer Heap Buffer Overflow

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
X X.org
Products
Libxfont Libxfont Libxfont2
CVE-2026-55999

xorg-server / xwayland glamor font atlas Heap Buffer Overflow

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
X Server Xorg-server Xwayland
CVE-2022-46340

xorg-x11-server: XTestSwapFakeInput stack overflow

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.

CVSS 3.1 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Debian Fedoraproject Redhat and 1 more
Products
Debian Linux Fedora Enterprise Linux and 1 more
CVE-2022-3551

X.org Server xkb.c ProcXkbGetKbdByName memory leak

A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211052.

CVSS 3.1 · 3.5 Low EPSS 2.4% KEV · Not listed
Vendors
Debian Fedoraproject Redhat and 1 more
Products
Debian Linux Fedora Enterprise Linux and 1 more