CVE-2016-10894
The CVE-2016-10894 issue affects xtrlock up to version 2.10, where multitouch input is not blocked. An attacker at a locked screen can inject input to programs (e.g., Chromium) via multitouch events such as pan scrolling, pinch/zoom, or by issuing mouse clicks after depressing the touchpad with a...