X.Org Server (Product): news timeline & CVEs

ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability

ZDI discloses a local use-after-free in X.Org Server that can leak information after low-privileged code execution.

Trend Micro's Zero Day Initiative published ZDI-26-780, a use-after-free in X.Org Server's GestureBuildSprite function. A local attacker who can already execute low-privileged code may disclose sensitive information. ZDI rated the issue CVSS 4.4 and assigned CVE-2026-93536. The advisory does not report active exploitation.

ZDI Published AdvisoriesOct 16, 05:00 UTC · 22h agoVulnerability 12 sources CVE-2026-93536

ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI disclosed an X.Org Server GLX heap overflow that lets local attackers escalate privileges.

Trend Micro's Zero Day Initiative published ZDI-26-762, a heap-based buffer overflow in the X.Org Server GLX RenderLarge path. A local attacker who can already run low-privileged code can escalate privileges on affected installations. ZDI assigned CVSS 7.8 and CVE-2026-93517. The advisory does not report exploitation in the wild.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-935171

ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI discloses a local X.Org Server XKB heap overflow that can escalate privileges.

ZDI advisory ZDI-26-765 describes a heap-based buffer overflow in X.Org Server XKB handling that allows local privilege escalation. The attacker must already be able to execute low-privileged code. ZDI assigns CVSS 7.8 and CVE-2026-93520. The advisory does not report exploitation in the wild.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-93520

ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability

ZDI discloses a local X.Org Server XKB double-free that can escalate privileges.

ZDI advisory ZDI-26-759 describes a double-free in X.Org Server XKB TextDoodad handling that can escalate privileges. A local attacker must already be able to run low-privileged code on the system. ZDI assigns CVSS 7.8 and CVE-2026-88812. The advisory does not state that exploitation has been observed.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-888121

ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability

ZDI discloses a local use-after-free in X.Org Server's Present extension that can leak information.

ZDI advisory ZDI-26-760 describes a use-after-free in the X.Org Server Present extension that can disclose sensitive information. Exploitation is local and requires the attacker to already execute low-privileged code. ZDI rates the issue CVSS 5.5 and assigns CVE-2026-93515. The advisory does not report observed exploitation.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-93515

ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability

ZDI disclosed an X.Org Server XInput use-after-free that can leak information to local attackers.

Trend Micro's Zero Day Initiative published ZDI-26-761, a use-after-free in X.Org Server XInput passive grab handling. A local attacker who can already run low-privileged code can disclose sensitive information on affected installations. ZDI assigned CVSS 5.5 and CVE-2026-93516. The advisory does not report exploitation in the wild.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-93516

ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI reports a local out-of-bounds read in X.Org Server XKB that can disclose information, CVE-2026-93524.

The Zero Day Initiative published ZDI-26-769 for CVE-2026-93524, an out-of-bounds read in X.Org Server's XKB XkbSetMap request handling. A local attacker who can already execute low-privileged code may disclose sensitive information. ZDI assigned a CVSS score of 6.1. No in-the-wild exploitation is mentioned.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-935241

ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI disclosed a local Glamor CopyArea heap overflow in X.Org Server enabling privilege escalation.

The Zero Day Initiative published ZDI-26-767, a heap-based buffer overflow in the X.Org Server Glamor CopyArea component. Exploitation is local and requires the attacker to already run low-privileged code before attempting privilege escalation. ZDI rated the flaw CVSS 7.8 and assigned CVE-2026-93522. In-the-wild exploitation is not mentioned.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-93522

ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI disclosed a local RandR heap overflow in X.Org Server that allows privilege escalation.

The Zero Day Initiative published ZDI-26-766, a heap-based buffer overflow in the X.Org Server RandR component. A local attacker who already has low-privileged code execution can use it to escalate privileges. ZDI assigned a CVSS score of 7.8 and CVE-2026-93521. The write-up does not state that exploitation has been observed.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-935211

ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI disclosed an X.Org Server XFixes heap overflow that lets local attackers escalate privileges.

Trend Micro's Zero Day Initiative published ZDI-26-764, a heap-based buffer overflow in the X.Org Server XFixes Pointer Barrier code. A local attacker who can already run low-privileged code can escalate privileges on affected installations. ZDI assigned CVSS 7.8 and CVE-2026-93519. The advisory does not report exploitation in the wild.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-935191

ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability

ZDI disclosed an X.Org Server XKB numeric truncation flaw enabling local privilege escalation.

Trend Micro's Zero Day Initiative published ZDI-26-763, a numeric truncation flaw in the X.Org Server XKB XkbResizeKeyType function. A local attacker who can already run low-privileged code can escalate privileges on affected installations. ZDI assigned CVSS 7.8 and CVE-2026-93518. The advisory does not report exploitation in the wild.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-93518

ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI disclosed a local heap overflow in X.Org Server XInput that can escalate privileges.

The Zero Day Initiative published ZDI-26-768, a heap-based buffer overflow in the X.Org Server XInput ProcXI passiveUngrabDevice handler. A local attacker who can already execute low-privileged code may escalate privileges on affected installations. ZDI assigned CVSS 7.8 and CVE-2026-93523. The advisory does not report active exploitation.

ZDI Published Advisoriesupdated Oct 16, 05:00 UTC · 22h agofirst Oct 15, 05:00 UTC · 1d agoVulnerability 12 sources CVE-2026-935231

Check your X.Org server version because a dozen vulnerabilities have been patched

X.Org patched 12 X server and Xwayland flaws, including nine that can allow arbitrary code execution.

X.Org fixed 12 security flaws in the X server and Xwayland, released in xorg-server 21.1.25 and xwayland 24.1.14. Nine can lead to arbitrary code execution, while the other three can crash the server or disclose information. The bugs include seven buffer overflows or out-of-bounds writes, three use-after-free issues, one double free, and one out-of-bounds read; ten say an authenticated X client can trigger the flaw. CVE-2026-93522, a heap overflow in Glamor CopyArea, affects only Xwayland, and CVE-2026-93520 and CVE-2026-93521 finish incomplete earlier fixes.

Help Net SecurityOct 7, 03:58 UTC · 9d agoVulnerability CVE-2026-93515 CVE-2026-93519 CVE-2026-93520+4 CVEs2

X.Org Server

Timeline13 articles

Related CVEsby mentions

Appears with