xserver
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-26601 | < 21.1.16 ; 22.0.0 – < 24.1.6 | Xorg: xwayland: use-after-free in syncinittrigger() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26600 | < 21.1.16 ; 22.0.0 – < 24.1.6 | Xorg: xwayland: use-after-free in playreleasedevents() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26599 | < 21.1.16 ; 22.0.0 – < 24.1.6 | Xorg: xwayland: use of uninitialized pointer in compredirectwindow() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26598 | < 21.1.16 ; 22.0.0 – < 24.1.6 | Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26597 | < 21.1.16 ; 22.0.0 – < 24.1.6 | Xorg: xwayland: buffer overflow in xkbchangetypesofkey() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26596 | < 21.1.16 ; 22.0.0 – < 24.1.6 | Xorg: xwayland: heap overflow in xkbwritekeysyms() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26595 | < 21.1.16 ; 22.0.0 – < 24.1.6 | Xorg: xwayland: buffer overflow in xkbvmodmasktext() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26594 | < 21.1.16 ; 22.0.0 – < 24.1.6 | X.org: xwayland: use-after-free of the root cursor | HIGH 7.8 | 0.4 % |