ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability
ZDI disclosed a local Glamor CopyArea heap overflow in X.Org Server enabling privilege escalation.
The Zero Day Initiative published ZDI-26-767, a heap-based buffer overflow in the X.Org Server Glamor CopyArea component. Exploitation is local and requires the attacker to already run low-privileged code before attempting privilege escalation. ZDI rated the flaw CVSS 7.8 and assigned CVE-2026-93522. In-the-wild exploitation is not mentioned.
- Heap overflow in the X.Org Server Glamor CopyArea path.
- Requires prior low-privileged local code execution.
- ZDI CVSS 7.8; tracked as CVE-2026-93522.
- No observed exploitation is stated.
Vulnerabilities mentionedAll →
- published —
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-93522 | NVD description · AI analysis pending | — | — | — | — | — |
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93522.
This source does not provide full text. Read it at zerodayinitiative.com.