What’s Vulnerable › Products

xorg-x11-server vulnerabilities

98 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 24 published in the last 12 months.

Check whether your xorg-x11-server version is affected

Latest xorg-x11-server vulnerabilities

• CVE-2026-56000 — xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() (CVSS 7.8)
• CVE-2026-55999 — xorg-server / xwayland glamor font atlas Heap Buffer Overflow (CVSS 7.8)
• CVE-2026-50264 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat (CVSS 7.8)
• CVE-2026-50263 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() (CVSS 5.5)
• CVE-2026-50262 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes (CVSS 5.5)
• CVE-2026-50261 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() (CVSS 7.8)
• CVE-2026-50260 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() (CVSS 7.8)
• CVE-2026-50259 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing (CVSS 7.8)
• CVE-2026-50258 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels (CVSS 7.8)
• CVE-2026-50257 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() (CVSS 7.8)
• CVE-2026-50256 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch (CVSS 7.8)
• CVE-2026-34002 — Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling (CVSS 9.1)
• CVE-2026-34000 — Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. (CVSS 9.1)
• CVE-2025-62230 — Xorg: xwayland: use-after-free in xkb client resource removal (CVSS 7.3)
• CVE-2025-62231 — Xorg: xmayland: value overflow in xkbsetcompatmap() (CVSS 7.3)
• CVE-2022-49737 — (CVSS 7.7)
• CVE-2025-26601 — Xorg: xwayland: use-after-free in syncinittrigger() (CVSS 7.8)
• CVE-2025-26600 — Xorg: xwayland: use-after-free in playreleasedevents() (CVSS 7.8)
• CVE-2025-26599 — Xorg: xwayland: use of uninitialized pointer in compredirectwindow() (CVSS 7.8)
• CVE-2025-26598 — Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() (CVSS 7.8)
• CVE-2025-26597 — Xorg: xwayland: buffer overflow in xkbchangetypesofkey() (CVSS 7.8)
• CVE-2025-26596 — Xorg: xwayland: heap overflow in xkbwritekeysyms() (CVSS 7.8)
• CVE-2025-26595 — Xorg: xwayland: buffer overflow in xkbvmodmasktext() (CVSS 7.8)
• CVE-2025-26594 — X.org: xwayland: use-after-free of the root cursor (CVSS 7.8)
• CVE-2024-0229 — Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVSS 7.8)