CVE-2026-93543

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-93543 Out-of-bounds read in libXi's XI2 class parser

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-93543

An out-of-bounds read exists in the XI2 class parser of libXi prior to version 1.8.4 . This vulnerability could be exploited by a malicious X server to cause a crash in an attached X client. No specific exploits or in-the-wild exploitation details are provided in the documents.

CVE-2026-93543 Out-of-bounds read in libXi's XI2 class parser

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-88807

A flaw was found in libXrender. Malicious X servers can exploit a heap overflow vulnerability in the RenderQueryPictFormats function. This allows them to inject arbitrary code into connected X clients, potentially leading to unauthorized control over the client's system. Mitigation Mitigation for...

CVE-2026-88806

A flaw was found in libX11. A heap-based buffer overflow vulnerability exists during the handling of XkbGetMap replies. A remote attacker, by operating a malicious X server, could exploit this flaw to potentially execute arbitrary code or cause a denial of service on the client system. User...

AZL-103388 CVE-2026-88806 affecting package libX11 1.8.7-1

A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...

CVE-2026-88806

A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...

AZL-103391 CVE-2026-88807 affecting package libXrender 0.9.11-1

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

EUVD-2026-83916

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

CVE-2026-88806

libX11 versions before 1.8.14 are vulnerable to a heap-based buffer overflow in the handling of the XkbGetMap reply, specifically overflowing the key_sym_map buffer. A malicious X server can trigger this, leading to potential compromise of confidentiality, integrity, and availability as rated by ...

CVE-2026-88806 libX11 XkbGetMap Reply Heap-based Buffer Overflow

A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...

EUVD-2026-83914

A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...

CVE-2026-88806 libX11 XkbGetMap Reply Heap-based Buffer Overflow

A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the X.Org X server. This “use-after-free” vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence function. An attacker with access to the X11 server can exploit this vulnerability without any user interaction, resulting in a...

Astra Linux – Vulnerability in xorg-server

A use-after-free flaw was identified in the X.Org X server and Xwayland within the miSyncDestroyFence function. A client that sets up multiple fence triggers may trigger a use-after-free function pointer call. An attacker could connect to the X server to set up a fence and wait for it, then anoth...

Astra Linux – Vulnerability in xorg-server

A use-after-free flaw was detected in the xorg-x11-server. A X server crash may occur in a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode if the pointer is moved from one screen’s window to the root window of another screen, a...

Astra Linux – Vulnerability in xorg-server

A stack-based buffer overflow vulnerability was discovered in the X.Org X server and Xwayland. The X server has multiple stack buffers with a size of XkbMaxShiftLevel XkbNumKbdGroups, but the CheckKeyTypes function does not verify or limit non-canonical key types to XkbMaxShiftLevel. A client can...

[SECURITY] [DSA 6497-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6497-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 12, 2026 https://www.debian.org/security/faq -...

Debian dsa-6497 : xnest - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6497 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6497-1 [email protected] https://www.debian.org/securit...