Xorg X11 Server
Approved changes feed: RSS · Atom
cpe:2.3:a:x.org:xorg-x11-server:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | X.Org (4cd053ee-09df-594a-873d-dbd09ec2f899) |
|---|---|
| Product | Xorg X11 Server (5dc99468-22d2-522c-b4e1-5519b2480f1b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-88812 |
vulnerable | 2026-11-03 10:17:49.349907 |
X.Org Server XKB SetGeometry TextDoodad Double Free
HIGH (7.8)
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.
Published: 2026-10-27T17:43:18.583Z
Updated: 2026-11-04T20:20:33.730Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93536 |
vulnerable | 2026-11-03 10:16:31.013158 |
X.Org Server GestureBuildSprite Use-After-Free
MEDIUM (5.3)
A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code.
Published: 2026-10-28T16:33:33.815Z
Updated: 2026-11-06T18:32:09.687Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93516 |
vulnerable | 2026-11-03 10:16:30.880470 |
.Org Server XInput Passive Grab Use-After-Free
MEDIUM (5.5)
A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X Clients to crash the X server or potentially execute code in X server context.
Published: 2026-10-28T13:03:30.088Z
Updated: 2026-11-06T18:33:56.971Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93518 |
vulnerable | 2026-11-03 10:16:30.759190 |
X.Org Server XKB ResizeKeyType Numeric Truncation
HIGH (7.8)
An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X server.
Published: 2026-10-28T14:32:01.702Z
Updated: 2026-11-05T18:43:29.043Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93521 |
vulnerable | 2026-11-03 10:16:30.621526 |
X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
HIGH (7.8)
A buffer overflow in RandR
ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.
Published: 2026-10-28T15:37:43.432Z
Updated: 2026-11-09T17:00:49.964Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93524 |
vulnerable | 2026-11-03 10:16:30.575575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93515 |
vulnerable | 2026-11-03 10:16:30.549518 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93520 |
vulnerable | 2026-11-03 10:16:30.505121 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93519 |
vulnerable | 2026-11-03 10:16:30.439095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56000 |
vulnerable | 2026-07-29 01:00:28.704902 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.