ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability
ZDI discloses a local use-after-free in X.Org Server's Present extension that can leak information.
ZDI advisory ZDI-26-760 describes a use-after-free in the X.Org Server Present extension that can disclose sensitive information. Exploitation is local and requires the attacker to already execute low-privileged code. ZDI rates the issue CVSS 5.5 and assigns CVE-2026-93515. The advisory does not report observed exploitation.
- Local use-after-free in the X.Org Server Present extension
- Attacker must already run low-privileged code
- ZDI CVSS 5.5; tracked as CVE-2026-93515
- No in-the-wild exploitation stated
Vulnerabilities mentionedAll →
- published —
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-93515 | NVD description · AI analysis pending | — | — | — | — | — |
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-93515.
This source does not provide full text. Read it at zerodayinitiative.com.