
Hello, my name is Orca
Unprivileged apps can claim Orca's D-Bus name and capture raw Wayland keystrokes on KWin and Mutter.
2 stories, newest first · one card per story

Unprivileged apps can claim Orca's D-Bus name and capture raw Wayland keystrokes on KWin and Mutter.
xdg-dbus-proxy broadcast filtering bypass is now tracked as CVE-2026-93676.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views