XS
Product
X Server
97
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 53Medium 10Low 0
Watch
Add X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6816 | 9.8 | Jan 18 | A flaw was found in X.Org server Affected: before 21.1.11 |
| CVE-2017-12187 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12186 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12185 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12184 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12183 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12182 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12181 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12180 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code Affected: before 1.19.5 |
| CVE-2017-12179 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly… Affected: before 1.19.5 |
| CVE-2017-12178 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary… Affected: before 1.19.5 |
| CVE-2017-12177 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute… Affected: before 1.19.5 |
| CVE-2017-12176 | 9.8 | Jan 24 | xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute… Affected: before 1.19.5 |
| CVE-2026-34002 | 9.1 | May 5 | Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling Affected: All versions, or not specified |
| CVE-2026-34000 | 9.1 | May 5 | Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. Affected: All versions, or not specified |
Showing 15