[ Vendor · 12 CVEs ]
x.org
CVEs affecting x.org published in the last 30 days, plus any x.org CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-94282 | 28 Sep 2026 | CVSS 5.6 | x.org libXiAn out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an… | |
| CVE-2026-94283 | 28 Sep 2026 | CVSS 6.5 | x.org libX11An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to… | |
| CVE-2026-94284 | 28 Sep 2026 | CVSS 5.5 | x.org libX11An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to… | |
| CVE-2026-94285 | 28 Sep 2026 | CVSS 5.1 | x.org libX11An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X… | |
| CVE-2026-94286 | 28 Sep 2026 | CVSS 7.1 | x.org libXtstAn out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. | |
| CVE-2026-94287 | 28 Sep 2026 | CVSS 5.5 | x.org libXpmA denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU… | |
| CVE-2026-94281 | 24 Sep 2026 | CVSS 6.5 | x.org libXiAn out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X… | |
| CVE-2026-93542 | 24 Sep 2026 | CVSS 6.5 | x.org libXiAn out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to… | |
| CVE-2026-93543 | 24 Sep 2026 | CVSS 7.4 | x.org libXiAn out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. | |
| CVE-2026-93544 | 24 Sep 2026 | CVSS 6.5 | x.org libXiAn out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X… | |
| CVE-2026-93545 | 24 Sep 2026 | CVSS 6.5 | x.org libXiAn out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. | |
| CVE-2026-93541 | 24 Sep 2026 | CVSS 6.5 | X.org libXiAn out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a |