XS
Product
X Server
by X.org · last CVE Jul 8, 2026
97
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 53Medium 10Low 0
Watch

Add X Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-14665
6.6
27%
Oct 25
A flaw was found in xorg-x11-server before 1.20.3
Affected: before 1.20.3
CVE-2022-3553
6.5
2%
Oct 17
X.org Server xquartz X11Controller.m denial of service
Affected: All versions, or not specified
CVE-2022-3551
6.5
2%
Oct 17
X.org Server xkb.c ProcXkbGetKbdByName memory leak
Affected: before 21.1.6
CVE-2017-10972
6.5
2%
Jul 6
Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged…
Affected: through 1.19.3
CVE-2026-50263
5.5
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()
Affected: before 21.1.23
CVE-2026-50262
5.5
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes
Affected: before 21.1.23
CVE-2024-0408
5.5
0%
Jan 18
A flaw was found in the X.Org server
Affected: before 21.1.11
CVE-2020-14347
5.5
0%
Aug 5
A flaw was found in the way xserver memory was not properly initialized
Affected: before 1.20.9
CVE-2023-5380
4.7
1%
Oct 25
A use-after-free flaw was found in the xorg-x11-server
Affected: before 21.1.9
CVE-2017-13721
4.7
0%
Oct 10
In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server…
Affected: through 1.19.3
Showing 10