x.org xorg-x11-server
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-93536 | < 21.1.25 | X.Org Server GestureBuildSprite Use-After-Free | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-93524 | < 21.1.25 | X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-93523 | < 21.1.25 | X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write | HIGH 7.8 | 0.2 % | ||
| CVE-2026-93522 | < 21.1.25 | X.Org Server Glamor CopyArea Heap Buffer Overflow | HIGH 7.8 | 0.2 % | ||
| CVE-2026-93521 | < 21.1.25 | X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow | HIGH 7.8 | 0.2 % | ||
| CVE-2026-93520 | < 21.1.25 | X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write | HIGH 7.8 | 0.2 % | ||
| CVE-2026-93519 | < 21.1.25 | X.Org Server XFixes Pointer Barrier Event List Buffer Overflow | HIGH 7.8 | 0.2 % | ||
| CVE-2026-93518 | < 21.1.25 | X.Org Server XKB ResizeKeyType Numeric Truncation | HIGH 7.8 | 0.2 % | ||
| CVE-2026-93516 | < 21.1.25 | .Org Server XInput Passive Grab Use-After-Free | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-93515 | < 21.1.25 | .Org Server Present Extension Use-After-Free | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-88812 | < 21.1.25 | X.Org Server XKB SetGeometry TextDoodad Double Free | HIGH 7.8 | 0.2 % | ||
| CVE-2026-56000 | < 21.1.24 | xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() | CRITICAL 9.0 | 0.3 % |