Known Vulnerabilities for Xwayland by X.org
Listed below are 10 of the newest known vulnerabilities associated with "Xwayland" by "X.org".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121604 json | wlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surface_class() in xwayland/xwm.c that allows loca... | Not Provided | 2026-11-03 | 2026-11-07 |
| CVE-2026-93536 json | A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before ... | Not Provided | 2026-10-28 | 2026-11-06 |
| CVE-2026-93524 json | A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authentica... | Not Provided | 2026-10-28 | 2026-11-06 |
| CVE-2026-93523 json | A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before... | Not Provided | 2026-10-28 | 2026-11-07 |
| CVE-2026-93522 json | A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayl... | Not Provided | 2026-10-28 | 2026-10-28 |
| CVE-2026-93521 json | A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could ... | Not Provided | 2026-10-28 | 2026-11-09 |
| CVE-2026-93520 json | A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X serv... | Not Provided | 2026-10-28 | 2026-11-07 |
| CVE-2026-93519 json | A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before... | Not Provided | 2026-10-28 | 2026-10-28 |
| CVE-2026-93518 json | An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in X.o... | Not Provided | 2026-10-28 | 2026-10-28 |
| CVE-2026-93517 json | A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 ... | Not Provided | 2026-10-28 | 2026-10-28 |