XS
Product
X Server
97
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 53Medium 10Low 0
Watch
Add X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6816 | 9.8 | Jan 18 | A flaw was found in X.Org server Affected: before 21.1.11 |
| CVE-2017-12187 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12186 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12185 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12184 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12183 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12182 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12181 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12180 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12179 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly… Affected: before 1.19.5 |
| CVE-2017-12178 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary… Affected: before 1.19.5 |
| CVE-2017-12177 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute… Affected: before 1.19.5 |
| CVE-2017-12176 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute… Affected: before 1.19.5 |
| CVE-2026-34002 | 9.1 | May 5 | Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling Affected: All versions, or not specified |
| CVE-2026-34000 | 9.1 | May 5 | Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. Affected: All versions, or not specified |
| CVE-2022-46344 | 8.8 | Dec 14 | A vulnerability was found in X.Org Affected: 1.20.4 |
| CVE-2022-46343 | 8.8 | Dec 14 | A vulnerability was found in X.Org Affected: 1.20.4 |
| CVE-2022-46342 | 8.8 | Dec 14 | A vulnerability was found in X.Org Affected: 1.20.4 |
| CVE-2022-46341 | 8.8 | Dec 14 | A vulnerability was found in X.Org Affected: 1.20.4 |
| CVE-2022-46340 | 8.8 | Dec 14 | A vulnerability was found in X.Org Affected: 1.20.4 |
| CVE-2022-3550 | 8.8 | Oct 17 | X.org Server xkb.c _GetCountedString buffer overflow Affected: before 21.1.6 |
| CVE-2017-10971 | 8.8 | Jul 6 | In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the… Affected: through 1.19.3 |
| CVE-2026-55999 | 7.8 | Jul 8 | xorg-server / xwayland glamor font atlas Heap Buffer Overflow Affected: before 21.2.24 |
| CVE-2026-56000 | 7.8 | Jul 8 | xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() Affected: before 21.2.24 |
| CVE-2026-50264 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat Affected: before 21.1.23 |
| CVE-2026-50261 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() Affected: before 21.1.23 |
| CVE-2026-50260 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() Affected: before 21.1.23 |
| CVE-2026-50258 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels Affected: before 21.1.23 |
| CVE-2026-50259 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing Affected: before 21.1.23 |
| CVE-2026-50256 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch Affected: before 21.1.23 |
| CVE-2026-50257 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() Affected: before 21.1.23 |
| CVE-2025-26601 | 7.8 | Feb 25 | A use-after-free flaw was found in X.Org and Xwayland Affected: before 21.1.16 |
| CVE-2025-26600 | 7.8 | Feb 25 | A use-after-free flaw was found in X.Org and Xwayland Affected: before 21.1.16 |
| CVE-2025-26599 | 7.8 | Feb 25 | An access to an uninitialized pointer flaw was found in X.Org and Xwayland Affected: before 21.1.16 |
| CVE-2025-26598 | 7.8 | Feb 25 | An out-of-bounds write flaw was found in X.Org and Xwayland Affected: before 21.1.16 |
| CVE-2025-26597 | 7.8 | Feb 25 | A buffer overflow flaw was found in X.Org and Xwayland Affected: before 21.1.16 |
| CVE-2025-26596 | 7.8 | Feb 25 | A heap overflow flaw was found in X.Org and Xwayland Affected: before 21.1.16 |
| CVE-2025-26595 | 7.8 | Feb 25 | A buffer overflow flaw was found in X.Org and Xwayland Affected: before 21.1.16 |
| CVE-2025-26594 | 7.8 | Feb 25 | A use-after-free flaw was found in X.Org and Xwayland Affected: before 21.1.16 |
| CVE-2024-0229 | 7.8 | Feb 9 | An out-of-bounds memory access flaw was found in the X.Org server Affected: before 21.1.11 |
| CVE-2024-0409 | 7.8 | Jan 18 | A flaw was found in the X.Org server Affected: before 21.1.11 |
| CVE-2023-6377 | 7.8 | Dec 13 | A flaw was found in xorg-server Affected: before 21.1.10 |
| CVE-2023-5367 | 7.8 | Oct 25 | A out-of-bounds write flaw was found in the xorg-x11-server Affected: before 21.1.9 |
| CVE-2023-1393 | 7.8 | Mar 30 | A flaw was found in X.Org Server Overlay Window Affected: before 21.1.8 |
| CVE-2023-0494 | 7.8 | Mar 27 | A vulnerability was found in X.Org Affected: before 21.1.7 |
| CVE-2022-4283 | 7.8 | Dec 14 | A vulnerability was found in X.Org Affected: 1.20.4 |
| CVE-2022-2320 | 7.8 | Sep 1 | A flaw was found in the Xorg-x11-server Affected: 21.1.0 |
| CVE-2022-2319 | 7.8 | Sep 1 | A flaw was found in the Xorg-x11-server Affected: 21.1.0 |
| CVE-2021-4011 | 7.8 | Dec 17 | A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14 Affected: before 1.20.14; 21.1.0; 21.1.1 |
| CVE-2021-4010 | 7.8 | Dec 17 | A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14 Affected: before 1.20.14; 21.1.0; 21.1.1 |