CVE-2011-2187

7.8 highEPSS 0.5%

High (7.8). EPSS 0.5% chance of exploitation in the next 30 days.

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2019-11-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

debian:debian_linux
xscreensaver_project:xscreensaver

References

https://access.redhat.com/security/cve/cve-2011-2187
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627382
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2187
https://security-tracker.debian.org/tracker/CVE-2011-2187
https://www.jwz.org/xscreensaver/changelog.html

Check your stack JSON