Skip to content
X.Org
Products
| Product | CVEs | Exploited | Latest |
|---|
| Xwayland | 22 | – | Oct 28, 2026 |
| xorg-x11-server | 12 | – | Oct 28, 2026 |
| libXi | 9 | – | Oct 27, 2026 |
| libX11 | 4 | – | Sep 28, 2026 |
| Server | 3 | – | Oct 17, 2022 |
| libXfont2 | 3 | – | Jul 8, 2026 |
| libXtst | 2 | – | Oct 27, 2026 |
| libXpm | 1 | – | Sep 28, 2026 |
| X server | 1 | – | Mar 16, 2025 |
| libXrender | 1 | – | Sep 21, 2026 |
| xorg-server | 1 | – | Jul 8, 2026 |
Exploited and recent CVEs
-
CVE-2026-93536
Medium 5.3
X.Org Server GestureBuildSprite Use-After-Free
0.2%
-
CVE-2026-93536
Medium 5.3
X.Org Server GestureBuildSprite Use-After-Free
0.2%
-
CVE-2026-93524
Medium 6.9
X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
0.2%
-
CVE-2026-93524
Medium 6.9
X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
0.2%
-
CVE-2026-93523
High 7.8
X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write
0.2%
-
CVE-2026-93523
High 7.8
X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write
0.2%
-
CVE-2026-93522
High 7.8
X.Org Server Glamor CopyArea Heap Buffer Overflow
0.2%
-
CVE-2026-93522
High 7.8
X.Org Server Glamor CopyArea Heap Buffer Overflow
0.2%
-
CVE-2026-93521
High 7.8
X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
0.2%
-
CVE-2026-93521
High 7.8
X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
0.2%
-
CVE-2026-93520
High 7.8
X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write
0.2%
-
CVE-2026-93520
High 7.8
X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write
0.2%
-
CVE-2026-93519
High 7.8
X.Org Server XFixes Pointer Barrier Event List Buffer Overflow
0.2%
-
CVE-2026-93518
High 7.8
X.Org Server XKB ResizeKeyType Numeric Truncation
0.2%
-
CVE-2026-93518
High 7.8
X.Org Server XKB ResizeKeyType Numeric Truncation
0.2%
-
CVE-2026-93517
High 8.5
X.Org Server GLX RenderLarge Heap Buffer Overflow
0.2%
-
CVE-2026-93516
Medium 5.5
.Org Server XInput Passive Grab Use-After-Free
0.2%
-
CVE-2026-93516
Medium 5.5
.Org Server XInput Passive Grab Use-After-Free
0.2%
-
CVE-2026-93515
Medium 6.8
.Org Server Present Extension Use-After-Free
0.2%
-
CVE-2026-93515
Medium 6.8
.Org Server Present Extension Use-After-Free
0.2%
-
CVE-2026-88812
High 7.8
X.Org Server XKB SetGeometry TextDoodad Double Free
0.2%
-
CVE-2026-88812
High 7.8
X.Org Server XKB SetGeometry TextDoodad Double Free
0.2%
-
CVE-2026-109090
High 7.5
libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow
0.3%
-
CVE-2026-109088
Medium 6.5
libXtst RECORD EnableContext Reply Endless Loop
0.3%
-
CVE-2026-109089
High 7.5
libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow
0.3%
-
CVE-2026-94287
Medium 5.5
Denial of service via unsigned underflow in libXpm's write path
0.1%
-
CVE-2026-94286
High 7.1
Out-of-bounds read in libXtst's RECORD reply parser
0.2%
-
CVE-2026-94285
Medium 5.1
Out-of-bounds read in libX11's byte-oriented codeset parser
0.1%
-
CVE-2026-94284
Medium 5.5
Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser
0.1%
-
CVE-2026-94283
Medium 6.5
Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser
0.2%