X.Org (Organization): news timeline & CVEs

Fwd: X.Org Security Advisory: multiple security issues in X.Org X client libraries

X.Org patched multiple security flaws in five X client libraries, with releases now available.

Alan Coopersmith forwarded an X.Org security advisory disclosing multiple security issues in X.Org X client libraries. All five affected library releases are available, with links posted to the xorg-announce list on 16 October 2026. The forwarded notice does not describe active exploitation or include CVE identifiers.

oss-securityOct 16, 21:56 UTC · 5h agoVulnerability

ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI reports a local out-of-bounds read in X.Org Server XKB that can disclose information, CVE-2026-93524.

The Zero Day Initiative published ZDI-26-769 for CVE-2026-93524, an out-of-bounds read in X.Org Server's XKB XkbSetMap request handling. A local attacker who can already execute low-privileged code may disclose sensitive information. ZDI assigned a CVSS score of 6.1. No in-the-wild exploitation is mentioned.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-935241

FW: X.Org Security Advisory: multiple security issues in X.Org X server

X.Org patched multiple security issues in X server 21.1.25 and Xwayland 24.1.14.

X.Org issued a security advisory on October 7, 2026, for multiple issues in the X server and Xwayland. Patches are in xorg-server-21.1.25 and xwayland-24.1.14; older releases are affected. The oss-security post does not name CVEs or report active exploitation.

oss-securityOct 7, 05:13 UTC · 9d agoVulnerability1

X.Org

Timeline3 articles

Related CVEsby mentions

Appears with

Fwd: X.Org Security Advisory: multiple security issues in X.Org X client libraries

ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability

FW: X.Org Security Advisory: multiple security issues in X.Org X server