cve.bz

x.org xwayland vulnerabilities, newest first, page 2

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 9.8CVE-2023-6816EPSS 2.1%

    A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating s…

  2. 7.5CVE-2023-6478EPSS 1.6%

    A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.

  3. 7.8CVE-2023-6377EPSS 1.6%

    A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execu…

  4. 4.7CVE-2023-5380EPSS 0.7%

    A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from …

  5. 7.8CVE-2023-5367EPSS 0.6%

    A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChang…