ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability
ZDI discloses a local X.Org Server XKB heap overflow that can escalate privileges.
ZDI advisory ZDI-26-765 describes a heap-based buffer overflow in X.Org Server XKB handling that allows local privilege escalation. The attacker must already be able to execute low-privileged code. ZDI assigns CVSS 7.8 and CVE-2026-93520. The advisory does not report exploitation in the wild.
- Heap-based buffer overflow in X.Org Server XKB
- Local privilege escalation from low-privileged code
- ZDI CVSS 7.8; tracked as CVE-2026-93520
- No observed exploitation reported
Vulnerabilities mentionedAll →
- published —
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-93520 | NVD description · AI analysis pending | — | — | — | — | — |
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93520.
This source does not provide full text. Read it at zerodayinitiative.com.