ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability
ZDI disclosed a local heap overflow in X.Org Server XInput that can escalate privileges.
The Zero Day Initiative published ZDI-26-768, a heap-based buffer overflow in the X.Org Server XInput ProcXI passiveUngrabDevice handler. A local attacker who can already execute low-privileged code may escalate privileges on affected installations. ZDI assigned CVSS 7.8 and CVE-2026-93523. The advisory does not report active exploitation.
46