XW
Product
xwayland
47
CVEs
0
On KEV
9.8
Max CVSS
11
New 30D
Severity mix
Critical 1High 35Medium 11Low 0
Watch
Add xwayland to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93517 New | 8.5 | Oct 28 | X.Org Server GLX RenderLarge Heap Buffer Overflow Affected: before 24.1.14 |
| CVE-2026-93523 New | 7.8 | Oct 28 | X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write Affected: before 24.1.14 |
| CVE-2026-93522 New | 7.8 | Oct 28 | X.Org Server Glamor CopyArea Heap Buffer Overflow Affected: 9 before 24.1.14 |
| CVE-2026-93521 New | 7.8 | Oct 28 | X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow Affected: before 24.1.14 |
| CVE-2026-93520 New | 7.8 | Oct 28 | X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write Affected: before 24.1.14 |
| CVE-2026-93518 New | 7.8 | Oct 28 | X.Org Server XKB ResizeKeyType Numeric Truncation Affected: before 24.1.14 |
| CVE-2026-88812 New | 7.8 | Oct 27 | X.Org Server XKB SetGeometry TextDoodad Double Free Affected: before 24.1.14 |
| CVE-2026-55999 | 7.8 | Jul 8 | xorg-server / xwayland glamor font atlas Heap Buffer Overflow Affected: before 24.1.13 |
| CVE-2026-56000 | 7.8 | Jul 8 | xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() Affected: before 24.1.13 |
| CVE-2026-50264 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat Affected: before 24.1.12 |
| CVE-2026-50261 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() Affected: before 24.1.12 |
| CVE-2026-50260 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() Affected: before 24.1.12 |
| CVE-2026-50258 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels Affected: before 24.1.12 |
| CVE-2026-50259 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing Affected: before 24.1.12 |
| CVE-2026-50256 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch Affected: before 24.1.12 |
| CVE-2026-50257 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() Affected: before 24.1.12 |
| CVE-2025-49180 | 7.8 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension Affected: before 24.1.7 |
| CVE-2025-26601 | 7.8 | Feb 25 | Xorg: xwayland: use-after-free in syncinittrigger() Affected: before 24.1.6 |
| CVE-2025-26600 | 7.8 | Feb 25 | Xorg: xwayland: use-after-free in playreleasedevents() Affected: before 24.1.6 |
| CVE-2025-26599 | 7.8 | Feb 25 | Xorg: xwayland: use of uninitialized pointer in compredirectwindow() Affected: before 24.1.6 |
| CVE-2025-26598 | 7.8 | Feb 25 | Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() Affected: before 24.1.6 |
| CVE-2025-26597 | 7.8 | Feb 25 | Xorg: xwayland: buffer overflow in xkbchangetypesofkey() Affected: before 24.1.6 |
| CVE-2025-26596 | 7.8 | Feb 25 | Xorg: xwayland: heap overflow in xkbwritekeysyms() Affected: before 24.1.6 |
| CVE-2025-26595 | 7.8 | Feb 25 | Xorg: xwayland: buffer overflow in xkbvmodmasktext() Affected: before 24.1.6 |
| CVE-2025-26594 | 7.8 | Feb 25 | X.org: xwayland: use-after-free of the root cursor Affected: before 24.1.6 |
| CVE-2024-0229 | 7.8 | Feb 9 | Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access Affected: before 23.2.4 |
| CVE-2024-0409 | 7.8 | Jan 18 | Xorg-x11-server: selinux context corruption Affected: before 23.2.4 |
| CVE-2023-6377 | 7.8 | Dec 13 | Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions Affected: before 23.2.3 |
| CVE-2023-5367 | 7.8 | Oct 25 | Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty Affected: before 23.2.2 |
| CVE-2023-6478 | 7.5 | Dec 13 | Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty Affected: before 23.2.3 |
| CVE-2025-62229 | 7.3 | Oct 30 | Xorg: xmayland: use-after-free in xpresentnotify structure creation Affected: 1.15.0 before 24.1.9 |
| CVE-2025-62230 | 7.3 | Oct 30 | Xorg: xwayland: use-after-free in xkb client resource removal Affected: before 24.1.9 |
| CVE-2025-62231 | 7.3 | Oct 30 | Xorg: xmayland: value overflow in xkbsetcompatmap() Affected: before 24.1.9 |
| CVE-2025-49179 | 7.3 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension Affected: before 24.1.7 |
| CVE-2025-49176 | 7.3 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension Affected: before 24.1.7 |
Showing 35