Approved changes feed: RSS · Atom

cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorX.Org (4cd053ee-09df-594a-873d-dbd09ec2f899)
ProductXwayland (a56cd0ed-a3be-53f8-bc9e-98161e070b61)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-88812 vulnerable 2026-11-03 10:17:49.350886 X.Org Server XKB SetGeometry TextDoodad Double Free
HIGH (7.8)
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.
Published: 2026-10-27T17:43:18.583Z
Updated: 2026-11-04T20:20:33.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-93517 vulnerable 2026-11-03 10:16:31.081232 X.Org Server GLX RenderLarge Heap Buffer Overflow
A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause crashes or code execution in X server context.
Published: 2026-10-28T13:16:39.431Z
Updated: 2026-11-05T18:30:21.407Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-93536 vulnerable 2026-11-03 10:16:31.013808 X.Org Server GestureBuildSprite Use-After-Free
MEDIUM (5.3)
A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code.
Published: 2026-10-28T16:33:33.815Z
Updated: 2026-11-06T18:32:09.687Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-93516 vulnerable 2026-11-03 10:16:30.881618 .Org Server XInput Passive Grab Use-After-Free
MEDIUM (5.5)
A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X Clients to crash the X server or potentially execute code in X server context.
Published: 2026-10-28T13:03:30.088Z
Updated: 2026-11-06T18:33:56.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-93518 vulnerable 2026-11-03 10:16:30.759848 X.Org Server XKB ResizeKeyType Numeric Truncation
HIGH (7.8)
An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X server.
Published: 2026-10-28T14:32:01.702Z
Updated: 2026-11-05T18:43:29.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-93521 vulnerable 2026-11-03 10:16:30.622252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-93524 vulnerable 2026-11-03 10:16:30.576146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-93515 vulnerable 2026-11-03 10:16:30.550102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-93520 vulnerable 2026-11-03 10:16:30.506014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56000 vulnerable 2026-07-29 01:00:28.704969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-55999 vulnerable 2026-07-29 01:00:28.699647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62231 vulnerable 2026-06-08 07:37:28.926999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62230 vulnerable 2026-06-08 07:37:28.925690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62229 vulnerable 2026-06-08 07:37:28.920952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49180 vulnerable 2026-06-08 07:29:12.672196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49179 vulnerable 2026-06-08 07:29:12.670876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49178 vulnerable 2026-06-08 07:29:12.669676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49177 vulnerable 2026-06-08 07:29:12.668535 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49176 vulnerable 2026-06-08 07:29:12.667861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49175 vulnerable 2026-06-08 07:29:12.663418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26601 vulnerable 2026-06-08 07:12:52.633414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26600 vulnerable 2026-06-08 07:12:52.632391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26599 vulnerable 2026-06-08 07:12:52.631256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26598 vulnerable 2026-06-08 07:12:52.630106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26597 vulnerable 2026-06-08 07:12:52.628778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26596 vulnerable 2026-06-08 07:12:52.627731 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26595 vulnerable 2026-06-08 07:12:52.626490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26594 vulnerable 2026-06-08 07:12:52.623140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0409 vulnerable 2026-06-08 06:22:00.998200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0408 vulnerable 2026-06-08 06:22:00.989825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0229 vulnerable 2026-06-08 06:22:00.059485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6816 vulnerable 2026-06-08 06:21:55.930285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6478 vulnerable 2026-06-08 06:19:47.452127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6377 vulnerable 2026-06-08 06:19:47.075838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5380 vulnerable 2026-06-08 06:19:43.484652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5367 vulnerable 2026-06-08 06:19:43.403489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.