CVE-2026-94286

An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients...

CVE-2026-94285

An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

CVE-2026-94284

An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

CVE-2026-94284

A flaw was found in libX11. An out-of-bounds read vulnerability exists in the X Input Method XIM trigger-key registration parser. A malicious X server can exploit this flaw by sending specially crafted trigger-key registration data to connected client applications, causing them to crash and...

CVE-2026-94286

The libXtst library (versions prior to 1.2.6 ) contains an out-of-bounds read vulnerability within its RECORD reply parser . This flaw could be exploited by malicious X servers to cause a crash of attached X clients. No specific remediation versions or exploit links are provided in the documents.

EUVD-2026-88178

An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients...

CVE-2026-94285 Out-of-bounds read in libX11's byte-oriented codeset parser

An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

EUVD-2026-88177

An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

EUVD-2026-88175

An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

CVE-2026-94284

The libX11 library (versions before 1.8.14 ) contains an out-of-bounds read vulnerability within the XIM trigger-key registration parser . This flaw could be exploited by malicious X servers to cause a crash in attached X clients. No specific remediation versions or exploit links are provided in ...

CVE-2026-94283

The libX11 library, specifically within the XIM (X Input Method) attribute parser , contains an out-of-bounds read vulnerability in versions prior to 1.8.14 . This flaw could be exploited by malicious X servers to cause a crash in attached X clients. No specific exploit details or remediation ste...

CVE-2026-94283 Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser

An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversi...

CVE-2026-94282

An out-of-bounds read exists in libXi 's XI2 enter/leave/focus cookie conversion affecting versions before 1.8.4 . This vulnerability could be exploited by a malicious X server to crash an attached X client. No specific exploit information or direct mitigation details are provided in the documents.

EUVD-2026-88168

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

CVE-2026-93541

A flaw was found in libXi. An out-of-bounds read vulnerability in the XQueryDeviceState function allows a malicious X server to trigger an application crash. By returning a specially crafted response to a device state query, the server causes the client application to read memory beyond allocated...

CVE-2026-93543

A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...

CVE-2026-93545

A flaw was found in libXi. An out-of-bounds read vulnerability in the XListInputDevices function allows a malicious X server to crash connected client applications. By returning specially crafted input device data when a client requests device information, the server can trigger an application...

CVE-2026-94281

A flaw was found in libXi. An out-of-bounds read vulnerability exists in the XListInputDevices function during the parsing of input device classes. A malicious X server can exploit this flaw by returning crafted device information, causing an attached X client application to crash and resulting i...