ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability
ZDI disclosed an X.Org Server XInput use-after-free that can leak information to local attackers.
Trend Micro's Zero Day Initiative published ZDI-26-761, a use-after-free in X.Org Server XInput passive grab handling. A local attacker who can already run low-privileged code can disclose sensitive information on affected installations. ZDI assigned CVSS 5.5 and CVE-2026-93516. The advisory does not report exploitation in the wild.
34