XO
Vendor
X.org
283
CVEs
0
On KEV
25
New 30D
Products
XW9.8
xwayland
x.org
47 CVEs0 on KEV11 new
XO7.8
xorg-x11-server
x.org
12 CVEs0 on KEV11 new
LI7.5
libXi
x.org
14 CVEs0 on KEV2 new
LI7.5
libXtst
x.org
3 CVEs0 on KEV1 new
XS9.8
X server
X.org
98 CVEs0 on KEV0 new
LI9.8
libX11
x.org
19 CVEs0 on KEV0 new
X1–
X11
X.org
18 CVEs0 on KEV0 new
X1–
X11r6
X.org
8 CVEs0 on KEV0 new
XO–
X.org
X.org
7 CVEs0 on KEV0 new
LI9.8
libXpm
x.org
6 CVEs0 on KEV0 new
XS–
Xserver
X.org
6 CVEs0 on KEV0 new
XF–
Xfree86
X.org
5 CVEs0 on KEV0 new
LI7.1
Libxfont
X.org
4 CVEs0 on KEV0 new
XO7.8
xorg-server
X.Org
4 CVEs0 on KEV0 new
LI8.8
libXfont2
X.Org
3 CVEs0 on KEV0 new
LI9.8
libXrender
X.org
3 CVEs0 on KEV0 new
SE8.8
Server
X.org
3 CVEs0 on KEV0 new
LI9.8
Libxrandr
X.org
2 CVEs0 on KEV0 new
LI9.8
Libxv
X.org
2 CVEs0 on KEV0 new
XF–
X Font Server
X.org
2 CVEs0 on KEV0 new
XW9.8
X Window System
X.org
2 CVEs0 on KEV0 new
X1–
X11r7
X.org
2 CVEs0 on KEV0 new
XD–
Xdm
X.org
2 CVEs0 on KEV0 new
EM–
Emu-linux-x87-xlibs
X.org
1 CVEs0 on KEV0 new
EV–
Evi
X.org
1 CVEs0 on KEV0 new
LI5.5
Libxdmcp
X.org
1 CVEs0 on KEV0 new
LI9.8
Libxfixes
X.org
1 CVEs0 on KEV0 new
LI9.8
Libxvmc
X.org
1 CVEs0 on KEV0 new
MI–
Mit-shm
X.org
1 CVEs0 on KEV0 new
TO–
Tog-cup
X.org
1 CVEs0 on KEV0 new
XF–
Xf86dga
X.org
1 CVEs0 on KEV0 new
XI–
Xinit
X.org
1 CVEs0 on KEV0 new
XL–
Xload
X.org
1 CVEs0 on KEV0 new
XT–
Xterm
X.org
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-93536 New | XO xorg-x11-server x.org | 5.3 | Oct 28 | X.Org Server GestureBuildSprite Use-After-Free |
| CVE-2026-93524 New | XW xwayland x.org | 6.9 | Oct 28 | X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read |
| CVE-2026-93523 New | XW xwayland x.org | 7.8 | Oct 28 | X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write |
| CVE-2026-93522 New | XO xorg-x11-server x.org | 7.8 | Oct 28 | X.Org Server Glamor CopyArea Heap Buffer Overflow |
| CVE-2026-93521 New | XO xorg-x11-server x.org | 7.8 | Oct 28 | X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow |
| CVE-2026-93520 New | XO xorg-x11-server x.org | 7.8 | Oct 28 | X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write |
| CVE-2026-93519 New | XO xorg-x11-server x.org | 7.8 | Oct 28 | X.Org Server XFixes Pointer Barrier Event List Buffer Overflow |
| CVE-2026-93518 New | XO xorg-x11-server x.org | 7.8 | Oct 28 | X.Org Server XKB ResizeKeyType Numeric Truncation |
| CVE-2026-93517 New | XW xwayland x.org | 8.5 | Oct 28 | X.Org Server GLX RenderLarge Heap Buffer Overflow |
| CVE-2026-93516 New | XW xwayland x.org | 5.5 | Oct 28 | .Org Server XInput Passive Grab Use-After-Free |
| CVE-2026-93515 New | XW xwayland x.org | 6.8 | Oct 28 | .Org Server Present Extension Use-After-Free |
| CVE-2026-88812 New | XO xorg-x11-server X.org | 7.8 | Oct 27 | X.Org Server XKB SetGeometry TextDoodad Double Free |
| CVE-2026-109090 New | LI libXi x.org | 7.5 | Oct 27 | libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow |
| CVE-2026-109088 New | LI libXtst X.org | 6.5 | Oct 27 | libXtst RECORD EnableContext Reply Endless Loop |
| CVE-2026-109089 New | LI libXi X.Org | 7.5 | Oct 27 | libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow |
| CVE-2026-94287 | LI libXpm x.org | 5.5 | Sep 28 | Denial of service via unsigned underflow in libXpm's write path |
| CVE-2026-94286 | LI libXtst x.org | 7.1 | Sep 28 | Out-of-bounds read in libXtst's RECORD reply parser |
| CVE-2026-94285 | LI libX11 x.org | 5.1 | Sep 28 | Out-of-bounds read in libX11's byte-oriented codeset parser |
| CVE-2026-94284 | LI libX11 x.org | 5.5 | Sep 28 | Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser |
| CVE-2026-94283 | LI libX11 x.org | 6.5 | Sep 28 | Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser |
| CVE-2026-94282 | LI libXi x.org | 5.6 | Sep 28 | Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion |
| CVE-2026-94281 | LI libXi x.org | 6.5 | Sep 24 | Out-of-bounds read in libXi's XListInputDevices() class parsing |
| CVE-2026-93545 | LI libXi x.org | 6.5 | Sep 24 | Out-of-bounds read in libXi's XListInputDevices() |
| CVE-2026-93544 | LI libXi x.org | 6.5 | Sep 24 | Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing |
| CVE-2026-93543 | LI libXi x.org | 7.4 | Sep 24 | Out-of-bounds read in libXi's XI2 class parser |
| CVE-2026-93542 | LI libXi x.org | 6.5 | Sep 24 | Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() |
| CVE-2026-93541 | LI libXi X.org | 6.5 | Sep 24 | Out-of-bounds read in libXi's XQueryDeviceState() |
| CVE-2026-88807 | LI libXrender X.org | 8.9 | Sep 21 | libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow |
| CVE-2026-88806 | LI libX11 x.org | 7.5 | Sep 21 | libX11 XkbGetMap Reply Heap-based Buffer Overflow |
| CVE-2026-56003 | LI libXfont2 X.Org | 8.8 | Jul 8 | libXfont2 computeProps Property Buffer Heap Buffer Overflow |
| CVE-2026-56002 | LI libXfont2 X.Org | 8.8 | Jul 8 | libXfont2 PCF Font Parsing Heap Buffer Overflow |
| CVE-2026-56001 | LI libXfont2 X.Org | 8.8 | Jul 8 | libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow |
| CVE-2026-55999 | XO xorg-server X.Org | 7.8 | Jul 8 | xorg-server / xwayland glamor font atlas Heap Buffer Overflow |
| CVE-2026-56000 | XO xorg-x11-server X.Org | 7.8 | Jul 8 | xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() |
| CVE-2026-50263 | XS X Server X.org | 5.5 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() |
| CVE-2026-50262 | XW Xwayland X.org | 5.5 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes |
| CVE-2026-50264 | XS X Server X.org | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat |
| CVE-2026-50261 | XW Xwayland X.org | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() |
| CVE-2026-50260 | XW Xwayland X.org | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() |
| CVE-2026-50258 | XS X Server X.org | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels |
| CVE-2026-50259 | XS X Server X.org | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing |
| CVE-2026-50256 | XS X Server X.org | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch |
| CVE-2026-50257 | XS X Server X.org | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() |
| CVE-2026-34002 | XS X Server X.org | 9.1 | May 5 | Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling |
| CVE-2026-34000 | XS X Server X.org | 9.1 | May 5 | Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. |
| CVE-2025-62229 | XW Xwayland X.Org | 7.3 | Oct 30 | Xorg: xmayland: use-after-free in xpresentnotify structure creation |
| CVE-2025-62230 | XW Xwayland X.Org | 7.3 | Oct 30 | Xorg: xwayland: use-after-free in xkb client resource removal |
| CVE-2025-62231 | XW Xwayland X.Org | 7.3 | Oct 30 | Xorg: xmayland: value overflow in xkbsetcompatmap() |
| CVE-2025-49180 | XW xwayland X.Org | 7.8 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension |
| CVE-2025-49179 | XW xwayland X.Org | 7.3 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension |
| CVE-2025-49178 | XW xwayland X.Org | 5.5 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore |
| CVE-2025-49177 | XW xwayland X.Org | 6.1 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode |
| CVE-2025-49176 | XW xwayland X.Org | 7.3 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension |
| CVE-2025-49175 | XW xwayland X.Org | 6.1 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors |
| CVE-2022-49737 | XS X server X.org | 7.7 | Mar 16 | In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread… |
| CVE-2025-26601 | XS X Server X.org | 7.8 | Feb 25 | Xorg: xwayland: use-after-free in syncinittrigger() |
| CVE-2025-26600 | XS X Server X.org | 7.8 | Feb 25 | Xorg: xwayland: use-after-free in playreleasedevents() |
| CVE-2025-26599 | XS X Server X.org | 7.8 | Feb 25 | Xorg: xwayland: use of uninitialized pointer in compredirectwindow() |
| CVE-2025-26598 | XS X Server X.org | 7.8 | Feb 25 | Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() |
| CVE-2025-26597 | XW Xwayland X.org | 7.8 | Feb 25 | Xorg: xwayland: buffer overflow in xkbchangetypesofkey() |