Skip to content

Known vulnerabilities in X.org xwayland

Is your version affected?

CVE Summary Score Published
CVE-2026-93536 X.Org Server GestureBuildSprite Use-After-Free 5.3 Medium Oct 28, 2026
CVE-2026-93524 X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read 6.9 Medium Oct 28, 2026
CVE-2026-93523 X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write 7.8 High Oct 28, 2026
CVE-2026-93522 X.Org Server Glamor CopyArea Heap Buffer Overflow 7.8 High Oct 28, 2026
CVE-2026-93521 A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14… 7.8 High Oct 28, 2026
CVE-2026-93520 X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write 7.8 High Oct 28, 2026
CVE-2026-93518 X.Org Server XKB ResizeKeyType Numeric Truncation 7.8 High Oct 28, 2026
CVE-2026-93517 X.Org Server GLX RenderLarge Heap Buffer Overflow 8.5 High Oct 28, 2026
CVE-2026-93516 .Org Server XInput Passive Grab Use-After-Free 5.5 Medium Oct 28, 2026
CVE-2026-93515 .Org Server Present Extension Use-After-Free 6.8 Medium Oct 28, 2026
CVE-2026-88812 X.Org Server XKB SetGeometry TextDoodad Double Free 7.8 High Oct 27, 2026
CVE-2026-55999 Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland… 8.5 High Jul 8, 2026
CVE-2026-56000 Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland… 9.0 Critical Jul 8, 2026
CVE-2025-62229 Xorg: xmayland: use-after-free in xpresentnotify structure creation 7.3 High Oct 30, 2025
CVE-2025-62230 Xorg: xwayland: use-after-free in xkb client resource removal 7.3 High Oct 30, 2025
CVE-2025-62231 Xorg: xmayland: value overflow in xkbsetcompatmap() 7.3 High Oct 30, 2025
CVE-2025-49180 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension 7.8 High Jun 17, 2025
CVE-2025-49179 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension 7.3 High Jun 17, 2025
CVE-2025-49178 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore 5.5 Medium Jun 17, 2025
CVE-2025-49177 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode 6.1 Medium Jun 17, 2025
CVE-2025-49176 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension 7.3 High Jun 17, 2025
CVE-2025-49175 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors 6.1 Medium Jun 17, 2025

Other X.org products