Browse CVEs

HIGH 7.8 CVE-2026-55999 Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a … X Server 21.2.24 / 24.1.13+ Fix from $1,9502026-07-08 HIGH 7.8 CVE-2026-56000 Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a H… X Server 21.2.24 / 24.1.13+ Fix from $1,9502026-07-08 HIGH 8.8 CVE-2022-4883 A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, re… Libxpm 3.5.15+ Fix from $1,9502023-02-07 HIGH 7.5 CVE-2022-46285 A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading … Libxpm 3.5.15+ Fix from $1,9502023-02-07 HIGH 7.5 CVE-2022-44617 A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can l… Libxpm 3.5.15+ Fix from $1,9502023-02-06 MEDIUM 6.5 CVE-2022-3553 A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the file hw/xquartz/X11Controller.m … X Server Patch available Fix from $1,6002022-10-17 HIGH 7.8 CVE-2022-2319 A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the… X Server Patch available Fix from $1,9502022-09-01 HIGH 7.8 CVE-2022-2320 A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the la… X Server Patch available Fix from $1,9502022-09-01 HIGH 7.0 CVE-2020-25697 A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take co… X Server Mitigation only Fix from $1,9502021-05-26 HIGH 7.8 CVE-2020-14360 A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege escalation vul… X Server 1.20.10+ Fix from $1,9502021-01-20 HIGH 7.8 CVE-2019-17624 "" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sending ct.c_char 1000 times, an at… X Server after 1.20.4 Fix from $1,9502019-10-16 HIGH 7.1 CVE-2017-13720 In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cau… Libxfont after 1.5.2 Fix from $1,9502017-10-11 HIGH 7.1 CVE-2017-13722 In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could b… Libxfont after 1.5.2 Fix from $1,9502017-10-11 HIGH 8.8 CVE-2017-10971 In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploitin… X Server after 1.19.3 Fix from $1,9502017-07-06 MEDIUM 6.5 CVE-2017-10972 Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to a… X Server after 1.19.3 Fix from $1,6002017-07-06 CRITICAL 9.8 CVE-2016-10164EPSS 8% Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to ca… Libxpm after 3.5.11 Fix from $2,3002017-02-01 HIGH 7.5 CVE-2015-3418 The ProcPutImage function in dix/dispatch.c in X.Org Server (aka xserver and xorg-server) before 1.16.4 allows attackers to cause a denial of service… X Server after 1.16.3 Fix from $1,9502016-12-13 MEDIUM 6.4 CVE-2015-0255 X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from proces… X Server after 1.16.3 Fix from $1,6002015-02-13 MEDIUM 6.5 CVE-2014-8103 X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of… X Server Patch available Fix from $1,6002014-12-10 MEDIUM 6.5 CVE-2014-8100 The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 all… Xfree86 after 1.16.2.99.901 Fix from $1,6002014-12-10 MEDIUM 6.5 CVE-2014-8101 The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allo… Xfree86 after 1.16.2.99.901 Fix from $1,6002014-12-10 MEDIUM 6.5 CVE-2014-8099 The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 all… X11 after 1.16.2.99.901 Fix from $1,6002014-12-10 MEDIUM 6.5 CVE-2014-8097 The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenti… X Server after 1.16.2.99.901 Fix from $1,6002014-12-10 MEDIUM 6.5 CVE-2014-8093 Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-… X11 after 1.16.2 Fix from $1,6002014-12-10 MEDIUM 6.5 CVE-2014-8092 Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote au… X11 after 1.16.2.99.901 Fix from $1,6002014-12-10 MEDIUM 6.8 CVE-2013-1995 X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpecte… Libxi after 1.7.1 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1998 Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code v… Libxi after 1.7.1 Fix from $1,6002013-06-15 MEDIUM 6.8 CVE-2013-1984 Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via ve… Libxi after 1.7.1 Fix from $1,6002013-06-15 HIGH 8.5 CVE-2010-4818EPSS 5% The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary… X.org Patch available Fix from $1,9502012-09-05 HIGH 10.0 CVE-2012-2118 Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibl… X11 Patch available Fix from $1,9502012-05-18