XW
Product
xwayland
47
CVEs
0
On KEV
9.8
Max CVSS
11
New 30D
Severity mix
Critical 1High 35Medium 11Low 0
Watch
Add xwayland to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93524 New | 6.9 | Oct 28 | X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read Affected: before 24.1.14 |
| CVE-2026-93515 New | 6.8 | Oct 28 | .Org Server Present Extension Use-After-Free Affected: before 24.1.14 |
| CVE-2025-49177 | 6.1 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode Affected: before 24.1.7 |
| CVE-2025-49175 | 6.1 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors Affected: before 24.1.8 |
| CVE-2026-93516 New | 5.5 | Oct 28 | .Org Server XInput Passive Grab Use-After-Free Affected: before 24.1.14 |
| CVE-2026-50263 | 5.5 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() Affected: before 24.1.12 |
| CVE-2026-50262 | 5.5 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes Affected: before 24.1.12 |
| CVE-2025-49178 | 5.5 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore Affected: before 24.1.7 |
| CVE-2024-0408 | 5.5 | Jan 18 | Xorg-x11-server: selinux unlabeled glx pbuffer Affected: before 23.2.4 |
| CVE-2026-93536 New | 5.3 | Oct 28 | X.Org Server GestureBuildSprite Use-After-Free Affected: before 24.1.14 |
| CVE-2023-5380 | 4.7 | Oct 25 | Xorg-x11-server: use-after-free bug in destroywindow Affected: before 23.2.2 |
Showing 11