Known Vulnerabilities for products from X.org
Listed below are 20 of the newest known vulnerabilities associated with the vendor "X.org".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-56000 json | Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-55999 json | Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-50264 json | An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client t... | Not Provided | 2026-06-05 | 2026-07-27 |
| CVE-2026-50263 json | A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-f... | Not Provided | 2026-06-05 | 2026-08-05 |
| CVE-2026-50262 json | An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size... | Not Provided | 2026-06-05 | 2026-08-05 |
| CVE-2026-50261 json | A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple Syn... | Not Provided | 2026-06-05 | 2026-08-05 |
| CVE-2026-50260 json | A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCount... | Not Provided | 2026-06-05 | 2026-08-05 |
| CVE-2026-50259 json | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size sta... | Not Provided | 2026-06-05 | 2026-08-05 |
| CVE-2026-50258 json | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers size... | Not Provided | 2026-06-05 | 2026-08-05 |
| CVE-2026-50257 json | A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fe... | Not Provided | 2026-06-05 | 2026-08-05 |
| CVE-2026-50256 json | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libX... | Not Provided | 2026-06-05 | 2026-08-05 |
| CVE-2026-34002 json | A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) mod... | Not Provided | 2026-05-05 | 2026-06-08 |
| CVE-2026-34000 json | A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically wi... | Not Provided | 2026-05-05 | 2026-06-08 |
| CVE-2025-62231 json | A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompat... | Not Provided | 2025-10-30 | 2026-07-01 |
| CVE-2025-62230 json | A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The softwar... | Not Provided | 2025-10-30 | 2026-07-01 |
| CVE-2025-26601 json | A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated on... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2025-26600 json | A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for tha... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2025-26599 json | An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it c... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2025-26598 json | An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device ... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2025-26597 json | A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the... | Not Provided | 2025-02-25 | 2026-06-29 |
Known software with vulnerabilities from X.org
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | X.org | Libx11 | 1.0.1 |
| Application | X.org | Libxdmcp | 1.1.0 |
| Application | X.org | Libxi | 1.5.0 |
| Application | X.org | Libxrandr | 1.5.0 |
| Application | X.org | Libxrender | 0.9.1 |
| Application | X.org | Libxv | 1.0.10 |
| Application | X.org | Libxvmc | 1.0.10 |
| Application | X.org | X11 | 1.0 |
| Application | X.org | Xfree86 | 4.0 |
| Application | X.org | Xorg-server | 1.10.0 |
| Application | X.org | X Server | - |