Lucene search
K

27 matches found

OSV
OSV
added 2025/11/12 10:28 a.m.4 views

RHSA-2025:20960 Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Bulletin has no description...

7.3CVSS6.6AI score0.00016EPSS
Exploits0References16
Rosalinux
Rosalinux
added 2025/08/03 9:2 p.m.3 views

Advisory ROSA-SA-2025-2917

software: x11-server 1.20.14 OS: ROSA-CHROME unaffected versions = x11-server-1.20.14-12 affected versions x11-server-1.20.14-12 CVE-ID: CVE-2025-26594 BDU-ID: 2025-04129 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Wayland protocol implementation for X.Org XWayland, an implementation of th...

7.8CVSS8.6AI score0.00031EPSS
Exploits0
Rosalinux
Rosalinux
added 2025/08/03 8:59 p.m.3 views

Advisory ROSA-SA-2025-2915

software: x11-server 21.1.16 OS: ROSA-CHROME unaffected versions = x11-server-21.1.16-1 affected versions x11-server-21.1.16-1 CVE-ID: CVE-2025-26594 BDU-ID: 2025-04129 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Wayland protocol implementation for X.Org XWayland, an implementation of the ...

7.8CVSS8.6AI score0.00031EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/06/19 12:0 a.m.2 views

The vulnerability of the XkbChangeTypesOfKey() function in the Wayland protocol for X.Org XWayland, which is implemented in the X Window System X.Org Server, allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the XkbChangeTypesOfKey function in the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

7.8CVSS7.9AI score0.00029EPSS
Exploits0References14Affected Software13
Rosalinux
Rosalinux
added 2025/05/26 6:35 a.m.11 views

Advisory ROSA-SA-2025-2870

Software: xorg-x11-server 1.20.4 OS: rosa-server79 packageevrstring: xorg-x11-server-1.20.4-29.0.1.res7 CVE-ID: CVE-2025-26594 BDU-ID: 2025-04129 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the Wayland protocol implementation for X.Org XWayland, an implementation of the X Window System X.Org...

7.8CVSS8.4AI score0.00031EPSS
Exploits0
Redos
Redos
added 2025/05/06 12:0 a.m.11 views

ROS-20250505-02

A vulnerability in the Wayland protocol implementation of X.Org XWayland, an implementation of the X Window System X.Org Server Server is related to the use of memory after it has been freed. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise it...

7.8CVSS7.1AI score0.00029EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/04/15 12:0 a.m.2 views

The vulnerability of the SyncInitTrigger() function in the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, relates to the use of memory after it is freed. This vulnerability allows a malicious actor to execute arbitrary code.

The vulnerability of the SyncInitTrigger function in the Wayland protocol implementation for X.Org XWayland is related to the use of memory after it is freed. Exploiting this vulnerability can allow a attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00029EPSS
Exploits0References17Affected Software14
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.2 views

The vulnerability of the compRedirectWindow() function in the Wayland protocol for X.Org XWayland, which is implemented in the X Window System X.Org Server, allows a attacker to execute arbitrary code.

The vulnerability of the compRedirectWindow function in the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00029EPSS
Exploits0References17Affected Software14
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.2 views

The vulnerability of the PlayReleasedEvents() function in the Wayland protocol for X.Org XWayland, which is implemented in the X Window System X.Org Server, allows a perpetrator to execute arbitrary code.

The vulnerability of the PlayReleasedEvents function in the Wayland protocol for X.Org XWayland is related to the use of memory after it is freed. Exploiting this vulnerability can allow a attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00029EPSS
Exploits0References17Affected Software14
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability in the Wayland protocol for X.Org XWayland, which is related to the X.Org Server, a server for the X Window System, arises from buffer overflows in the stack. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Wayland protocol for X.Org XWayland, which is implemented by the X.Org Server, is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.5AI score0.00029EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the Wayland protocol for X.Org XWayland, which is a implementation of the X Window System X.Org Server, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Wayland protocol for X.Org XWayland, which is implemented by the X.Org Server, relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.2AI score0.00029EPSS
Exploits0References18Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability in the implementation of the Wayland protocol for X.Org XWayland, which is related to writing beyond the buffer boundaries, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Wayland protocol for X.Org XWayland, which is implemented by the X.Org Server, is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.4AI score0.00031EPSS
Exploits0References17Affected Software8
RedHat Linux
RedHat Linux
added 2025/03/17 1:48 a.m.6 views

xorg: xwayland: Use-after-free in SyncInitTrigger()

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

7.8CVSS5.7AI score0.00029EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/02/25 12:0 a.m.1 views

X.Org和Xwayland 资源管理错误漏洞

X.Org is an open source free software from the X.Org Foundation.Xwayland is an open source communication protocol from Xwayland that specifies how a display server communicates with its clients. A resource management error vulnerability exists in X.Org and Xwayland that stems from the root cursor...

7.8CVSS7.6AI score0.00029EPSS
Exploits0References3
Redos
Redos
added 2024/10/08 12:0 a.m.15 views

ROS-20241008-05

A vulnerability in the ProcXkbGetKbdByName function of the xkb/xkb.c component of the Wayland protocol implementation for X.Org XWayland, an implementation of the X Window System X.Org Server is related to incorrect memory freeing before deleting the last link. Exploitation of the vulnerability...

8.8CVSS7.5AI score0.0063EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.1 views

The vulnerability of the communication protocol between the client and the composer, Wayland, is related to a potential overflow of data. This allows attackers to access confidential information, compromise its integrity, and cause service failures.

The vulnerability of the Wayland communication protocol between the client and the composer is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

6.6CVSS6.8AI score0.00026EPSS
Exploits1References6Affected Software3
Redos
Redos
added 2024/03/29 12:0 a.m.29 views

ROS-20240329-09

A vulnerability in the Privates Handler component of the X Window System X.Org Server implementation is related to an operation exceeding the buffer boundaries. operation beyond the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

9.8CVSS8.2AI score0.03015EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/01/25 12:0 a.m.1 views

The vulnerability in the implementation of the Wayland protocol for X.Org XWayland, which is related to the execution of operations beyond the buffer boundaries in memory, allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Wayland protocol for X.Org XWayland, which is part of the X.Org Server for the X Window System, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitra...

7.8CVSS7.2AI score0.00295EPSS
Exploits0References15Affected Software10
BDU FSTEC
BDU FSTEC
added 2024/01/25 12:0 a.m.1 views

The vulnerability of the XISendDeviceHierarchyEvent function in the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the XISendDeviceHierarchyEvent function in the Wayland protocol implementation for X.Org XWayland is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

7.8CVSS7.2AI score0.00239EPSS
Exploits0References16Affected Software10
BDU FSTEC
BDU FSTEC
added 2024/01/25 12:0 a.m.1 views

The vulnerability of the DisableDevice function in the Wayland protocol implementation for X.Org XWayland, which is part of the X Window System X.Org Server, allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the DisableDevice function in the Wayland protocol implementation for X.Org XWayland, which is part of the X.Org Server for the X Window System, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure or execute...

7.8CVSS7.2AI score0.00239EPSS
Exploits0References16Affected Software10
Rows per page
Query Builder