What’s Vulnerable › Products
X.Org xwayland vulnerabilities
36 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 39 published in the last 12 months.
Check whether your X.Org xwayland version is affected
Latest X.Org xwayland vulnerabilities
- CVE-2026-93536 — X.Org Server GestureBuildSprite Use-After-Free (CVSS 5.3)
- CVE-2026-93524 — X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (CVSS 6.9)
- CVE-2026-93523 — X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write (CVSS 7.8)
- CVE-2026-93522 — X.Org Server Glamor CopyArea Heap Buffer Overflow (CVSS 7.8)
- CVE-2026-93521 — X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow (CVSS 7.8)
- CVE-2026-93520 — X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write (CVSS 7.8)
- CVE-2026-93518 — X.Org Server XKB ResizeKeyType Numeric Truncation (CVSS 7.8)
- CVE-2026-93517 — X.Org Server GLX RenderLarge Heap Buffer Overflow (CVSS 8.5)
- CVE-2026-93516 — .Org Server XInput Passive Grab Use-After-Free (CVSS 5.5)
- CVE-2026-93515 — .Org Server Present Extension Use-After-Free (CVSS 6.8)
- CVE-2026-88812 — X.Org Server XKB SetGeometry TextDoodad Double Free (CVSS 7.8)
- CVE-2026-56000 — xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() (CVSS 7.8)
- CVE-2026-55999 — xorg-server / xwayland glamor font atlas Heap Buffer Overflow (CVSS 7.8)
- CVE-2026-50264 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat (CVSS 7.8)
- CVE-2026-50263 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() (CVSS 5.5)
- CVE-2026-50262 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes (CVSS 5.5)
- CVE-2026-50261 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() (CVSS 7.8)
- CVE-2026-50260 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() (CVSS 7.8)
- CVE-2026-50259 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing (CVSS 7.8)
- CVE-2026-50258 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels (CVSS 7.8)
- CVE-2026-50257 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() (CVSS 7.8)
- CVE-2026-50256 — Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch (CVSS 7.8)
- CVE-2025-62230 — Xorg: xwayland: use-after-free in xkb client resource removal (CVSS 7.3)
- CVE-2025-62229 — Xorg: xmayland: use-after-free in xpresentnotify structure creation (CVSS 7.3)
- CVE-2025-62231 — Xorg: xmayland: value overflow in xkbsetcompatmap() (CVSS 7.3)