XW
Product
xwayland
by x.org · last CVE Oct 28, 2026
47
CVEs
0
On KEV
9.8
Max CVSS
11
New 30D
Severity mix
Critical 1High 35Medium 11Low 0
Watch

Add xwayland to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-6816
9.8
2%
Jan 18
A flaw was found in X.Org server
Affected: before 23.2.4
CVE-2026-93517
New
8.5–Oct 28
X.Org Server GLX RenderLarge Heap Buffer Overflow
Affected: before 24.1.14
CVE-2026-93523
New
7.8–Oct 28
X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write
Affected: before 24.1.14
CVE-2026-93522
New
7.8–Oct 28
X.Org Server Glamor CopyArea Heap Buffer Overflow
Affected: 9 before 24.1.14
CVE-2026-93521
New
7.8–Oct 28
X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
Affected: before 24.1.14
CVE-2026-93520
New
7.8–Oct 28
X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write
Affected: before 24.1.14
CVE-2026-93518
New
7.8–Oct 28
X.Org Server XKB ResizeKeyType Numeric Truncation
Affected: before 24.1.14
CVE-2026-88812
New
7.8
0%
Oct 27
X.Org Server XKB SetGeometry TextDoodad Double Free
Affected: before 24.1.14
CVE-2026-55999
7.8
0%
Jul 8
xorg-server / xwayland glamor font atlas Heap Buffer Overflow
Affected: before 24.1.13
CVE-2026-56000
7.8
0%
Jul 8
xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()
Affected: before 24.1.13
CVE-2026-50264
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat
Affected: before 24.1.12
CVE-2026-50261
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()
Affected: before 24.1.12
CVE-2026-50260
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()
Affected: before 24.1.12
CVE-2026-50258
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels
Affected: before 24.1.12
CVE-2026-50259
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing
Affected: before 24.1.12
CVE-2026-50256
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch
Affected: before 24.1.12
CVE-2026-50257
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()
Affected: before 24.1.12
CVE-2025-49180
7.8
0%
Jun 17
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
Affected: before 24.1.7
CVE-2025-26601
7.8
0%
Feb 25
Xorg: xwayland: use-after-free in syncinittrigger()
Affected: before 24.1.6
CVE-2025-26600
7.8
0%
Feb 25
Xorg: xwayland: use-after-free in playreleasedevents()
Affected: before 24.1.6
CVE-2025-26599
7.8
0%
Feb 25
Xorg: xwayland: use of uninitialized pointer in compredirectwindow()
Affected: before 24.1.6
CVE-2025-26598
7.8
0%
Feb 25
Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()
Affected: before 24.1.6
CVE-2025-26597
7.8
0%
Feb 25
Xorg: xwayland: buffer overflow in xkbchangetypesofkey()
Affected: before 24.1.6
CVE-2025-26596
7.8
0%
Feb 25
Xorg: xwayland: heap overflow in xkbwritekeysyms()
Affected: before 24.1.6
CVE-2025-26595
7.8
0%
Feb 25
Xorg: xwayland: buffer overflow in xkbvmodmasktext()
Affected: before 24.1.6
CVE-2025-26594
7.8
0%
Feb 25
X.org: xwayland: use-after-free of the root cursor
Affected: before 24.1.6
CVE-2024-0229
7.8
1%
Feb 9
An out-of-bounds memory access flaw was found in the X.Org server
Affected: before 23.2.4
CVE-2024-0409
7.8
0%
Jan 18
A flaw was found in the X.Org server
Affected: before 23.2.4
CVE-2023-6377
7.8
2%
Dec 13
A flaw was found in xorg-server
Affected: before 23.2.3
CVE-2023-5367
7.8
1%
Oct 25
A out-of-bounds write flaw was found in the xorg-x11-server
Affected: before 23.2.2
CVE-2023-6478
7.5
2%
Dec 13
A flaw was found in xorg-server
Affected: before 23.2.3
CVE-2025-62229
7.3
1%
Oct 30
Xorg: xmayland: use-after-free in xpresentnotify structure creation
Affected: 1.15.0 before 24.1.9
CVE-2025-62230
7.3
0%
Oct 30
Xorg: xwayland: use-after-free in xkb client resource removal
Affected: before 24.1.9
CVE-2025-62231
7.3
0%
Oct 30
Xorg: xmayland: value overflow in xkbsetcompatmap()
Affected: before 24.1.9
CVE-2025-49179
7.3
0%
Jun 17
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension
Affected: before 24.1.7
CVE-2025-49176
7.3
0%
Jun 17
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
Affected: before 24.1.7
CVE-2026-93524
New
6.9–Oct 28
X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
Affected: before 24.1.14
CVE-2026-93515
New
6.8–Oct 28
.Org Server Present Extension Use-After-Free
Affected: before 24.1.14
CVE-2025-49177
6.1
0%
Jun 17
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode
Affected: before 24.1.7
CVE-2025-49175
6.1
0%
Jun 17
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
Affected: before 24.1.8
CVE-2026-93516
New
5.5–Oct 28
.Org Server XInput Passive Grab Use-After-Free
Affected: before 24.1.14
CVE-2026-50263
5.5
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()
Affected: before 24.1.12
CVE-2026-50262
5.5
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes
Affected: before 24.1.12
CVE-2025-49178
5.5
0%
Jun 17
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
Affected: before 24.1.7
CVE-2024-0408
5.5
0%
Jan 18
A flaw was found in the X.Org server
Affected: before 23.2.4
CVE-2026-93536
New
5.3–Oct 28
X.Org Server GestureBuildSprite Use-After-Free
Affected: before 24.1.14
CVE-2023-5380
4.7
1%
Oct 25
A use-after-free flaw was found in the xorg-x11-server
Affected: before 23.2.2
Showing 47