ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI reports a local out-of-bounds read in X.Org Server XKB that can disclose information, CVE-2026-93524.
The Zero Day Initiative published ZDI-26-769 for CVE-2026-93524, an out-of-bounds read in X.Org Server's XKB XkbSetMap request handling. A local attacker who can already execute low-privileged code may disclose sensitive information. ZDI assigned a CVSS score of 6.1. No in-the-wild exploitation is mentioned.
- CVE-2026-93524 is an X.Org Server XKB out-of-bounds read.
- Exploitation requires existing low-privileged local code execution.
- ZDI rates it CVSS 6.1; no active exploitation is reported.
Vulnerabilities mentionedAll →
- published —
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-93524 | NVD description · AI analysis pending | — | — | — | — | — |
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2026-93524.
This source does not provide full text. Read it at zerodayinitiative.com.