[ Vendor · 1 CVEs ]

wlroots

CVEs affecting wlroots published in the last 30 days, plus any wlroots CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-121604 3 Nov 2026 CVSS 3.3 wlrootswlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surface_class() in xwayland/xwm.c that allows local X11 clients to leak…