ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability
ZDI disclosed an X.Org Server XKB numeric truncation flaw enabling local privilege escalation.
Trend Micro's Zero Day Initiative published ZDI-26-763, a numeric truncation flaw in the X.Org Server XKB XkbResizeKeyType function. A local attacker who can already run low-privileged code can escalate privileges on affected installations. ZDI assigned CVSS 7.8 and CVE-2026-93518. The advisory does not report exploitation in the wild.
48