XW
Product
xwayland
47
CVEs
0
On KEV
9.8
Max CVSS
11
New 30D
Severity mix
Critical 1High 35Medium 11Low 0
Watch
Add xwayland to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6816 | 9.8 | Jan 18 | A flaw was found in X.Org server Affected: before 23.2.4 |
| CVE-2026-93517 New | 8.5 | Oct 28 | X.Org Server GLX RenderLarge Heap Buffer Overflow Affected: before 24.1.14 |
| CVE-2026-93523 New | 7.8 | Oct 28 | X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write Affected: before 24.1.14 |
| CVE-2026-93522 New | 7.8 | Oct 28 | X.Org Server Glamor CopyArea Heap Buffer Overflow Affected: 9 before 24.1.14 |
| CVE-2026-93521 New | 7.8 | Oct 28 | X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow Affected: before 24.1.14 |
| CVE-2026-93520 New | 7.8 | Oct 28 | X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write Affected: before 24.1.14 |
| CVE-2026-93518 New | 7.8 | Oct 28 | X.Org Server XKB ResizeKeyType Numeric Truncation Affected: before 24.1.14 |
| CVE-2026-88812 New | 7.8 | Oct 27 | X.Org Server XKB SetGeometry TextDoodad Double Free Affected: before 24.1.14 |
| CVE-2026-55999 | 7.8 | Jul 8 | xorg-server / xwayland glamor font atlas Heap Buffer Overflow Affected: before 24.1.13 |
| CVE-2026-56000 | 7.8 | Jul 8 | xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() Affected: before 24.1.13 |
| CVE-2026-50264 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat Affected: before 24.1.12 |
| CVE-2026-50261 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() Affected: before 24.1.12 |
| CVE-2026-50260 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() Affected: before 24.1.12 |
| CVE-2026-50258 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels Affected: before 24.1.12 |
| CVE-2026-50259 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing Affected: before 24.1.12 |
| CVE-2026-50256 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch Affected: before 24.1.12 |
| CVE-2026-50257 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() Affected: before 24.1.12 |
| CVE-2025-49180 | 7.8 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension Affected: before 24.1.7 |
| CVE-2025-26601 | 7.8 | Feb 25 | Xorg: xwayland: use-after-free in syncinittrigger() Affected: before 24.1.6 |
| CVE-2025-26600 | 7.8 | Feb 25 | Xorg: xwayland: use-after-free in playreleasedevents() Affected: before 24.1.6 |
| CVE-2025-26599 | 7.8 | Feb 25 | Xorg: xwayland: use of uninitialized pointer in compredirectwindow() Affected: before 24.1.6 |
| CVE-2025-26598 | 7.8 | Feb 25 | Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() Affected: before 24.1.6 |
| CVE-2025-26597 | 7.8 | Feb 25 | Xorg: xwayland: buffer overflow in xkbchangetypesofkey() Affected: before 24.1.6 |
| CVE-2025-26596 | 7.8 | Feb 25 | Xorg: xwayland: heap overflow in xkbwritekeysyms() Affected: before 24.1.6 |
| CVE-2025-26595 | 7.8 | Feb 25 | Xorg: xwayland: buffer overflow in xkbvmodmasktext() Affected: before 24.1.6 |
| CVE-2025-26594 | 7.8 | Feb 25 | X.org: xwayland: use-after-free of the root cursor Affected: before 24.1.6 |
| CVE-2024-0229 | 7.8 | Feb 9 | An out-of-bounds memory access flaw was found in the X.Org server Affected: before 23.2.4 |
| CVE-2024-0409 | 7.8 | Jan 18 | A flaw was found in the X.Org server Affected: before 23.2.4 |
| CVE-2023-6377 | 7.8 | Dec 13 | A flaw was found in xorg-server Affected: before 23.2.3 |
| CVE-2023-5367 | 7.8 | Oct 25 | A out-of-bounds write flaw was found in the xorg-x11-server Affected: before 23.2.2 |
| CVE-2023-6478 | 7.5 | Dec 13 | A flaw was found in xorg-server Affected: before 23.2.3 |
| CVE-2025-62229 | 7.3 | Oct 30 | Xorg: xmayland: use-after-free in xpresentnotify structure creation Affected: 1.15.0 before 24.1.9 |
| CVE-2025-62230 | 7.3 | Oct 30 | Xorg: xwayland: use-after-free in xkb client resource removal Affected: before 24.1.9 |
| CVE-2025-62231 | 7.3 | Oct 30 | Xorg: xmayland: value overflow in xkbsetcompatmap() Affected: before 24.1.9 |
| CVE-2025-49179 | 7.3 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension Affected: before 24.1.7 |
| CVE-2025-49176 | 7.3 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension Affected: before 24.1.7 |
| CVE-2026-93524 New | 6.9 | Oct 28 | X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read Affected: before 24.1.14 |
| CVE-2026-93515 New | 6.8 | Oct 28 | .Org Server Present Extension Use-After-Free Affected: before 24.1.14 |
| CVE-2025-49177 | 6.1 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode Affected: before 24.1.7 |
| CVE-2025-49175 | 6.1 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors Affected: before 24.1.8 |
| CVE-2026-93516 New | 5.5 | Oct 28 | .Org Server XInput Passive Grab Use-After-Free Affected: before 24.1.14 |
| CVE-2026-50263 | 5.5 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() Affected: before 24.1.12 |
| CVE-2026-50262 | 5.5 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes Affected: before 24.1.12 |
| CVE-2025-49178 | 5.5 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore Affected: before 24.1.7 |
| CVE-2024-0408 | 5.5 | Jan 18 | A flaw was found in the X.Org server Affected: before 23.2.4 |
| CVE-2026-93536 New | 5.3 | Oct 28 | X.Org Server GestureBuildSprite Use-After-Free Affected: before 24.1.14 |
| CVE-2023-5380 | 4.7 | Oct 25 | A use-after-free flaw was found in the xorg-x11-server Affected: before 23.2.2 |
Showing 47
