Product by X.Org
X.Org Xwayland
48 known vulnerabilities in X.Org Xwayland (X.Org), 0 of them actively exploited (CISA KEV).
Key figures
48
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-6816 | Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer | 9.8 | |
| High | CVE-2023-6377 | Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions | 7.8 | |
| High | CVE-2023-6478 | Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty | 7.6 | |
| High | CVE-2024-0229 | Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access | 7.8 | |
| High | CVE-2026-93517 | X.Org Server GLX RenderLarge Heap Buffer Overflow | — | |
| High | CVE-2026-93523 | X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write | 7.8 | |
| High | CVE-2026-93522 | X.Org Server Glamor CopyArea Heap Buffer Overflow | 7.8 | |
| High | CVE-2026-93521 | X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow | 7.8 | |
| High | CVE-2026-93520 | X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write | 7.8 | |
| High | CVE-2026-93519 | X.Org Server XFixes Pointer Barrier Event List Buffer Overflow | 7.8 | |
| High | CVE-2026-93518 | X.Org Server XKB ResizeKeyType Numeric Truncation | 7.8 | |
| Critical | CVE-2026-56000 | xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() | 7.8 | |
| High | CVE-2026-88812 | X.Org Server XKB SetGeometry TextDoodad Double Free | 7.8 | |
| High | CVE-2026-55999 | xorg-server / xwayland glamor font atlas Heap Buffer Overflow | 8.5 | |
| Medium | CVE-2026-93524 | X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read | — | |
| Medium | CVE-2026-93515 | .Org Server Present Extension Use-After-Free | — | |
| High | CVE-2025-62229 | Xorg: xmayland: use-after-free in xpresentnotify structure creation | 7.3 | |
| High | CVE-2023-5367 | Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty | 7.8 | |
| High | CVE-2025-26597 | Xorg: xwayland: buffer overflow in xkbchangetypesofkey() | 7.8 | |
| High | CVE-2025-26596 | Xorg: xwayland: heap overflow in xkbwritekeysyms() | 7.8 | |
| High | CVE-2025-26595 | Xorg: xwayland: buffer overflow in xkbvmodmasktext() | 7.8 | |
| Medium | CVE-2026-93516 | .Org Server XInput Passive Grab Use-After-Free | 5.5 | |
| High | CVE-2026-50259 | Red Hat Enterprise Linux: Stack-based Buffer Overflow | 7.8 | |
| High | CVE-2026-50256 | Red Hat Enterprise Linux: Stack-based Buffer Overflow | 7.8 | |
| High | CVE-2026-50258 | Red Hat Enterprise Linux: Stack-based Buffer Overflow | 7.8 |