xorg-x11-server (SUSE:Linux Enterprise Module for Development Tools 15 SP7) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Development Tools 15 SP7 package xorg-x11-server, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (14)

• CVE-2025-49180 — CVSS 7.8 (high): A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to…
• CVE-2026-34001 — CVSS 7.8 (high): A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within…
• CVE-2026-33999 — CVSS 7.8 (high): A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an…
• CVE-2026-34003 — CVSS 7.8 (high): A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X…
• CVE-2025-62231 — CVSS 7.3 (high): A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function…
• CVE-2025-62230 — CVSS 7.3 (high): A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees…
• CVE-2025-49176 — CVSS 7.3 (high): A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size…
• CVE-2025-49179 — CVSS 7.3 (high): A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when…
• CVE-2025-62229 — CVSS 7.3 (high): A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during…
• CVE-2025-49175 — CVSS 6.1 (medium): A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least…
• CVE-2026-34000 — CVSS 6.1 (medium): A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the…
• CVE-2026-34002 — CVSS 6.1 (medium): A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map…
• CVE-2025-49177 — CVSS 6.1 (medium): A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client…
• CVE-2025-49178 — CVSS 5.5 (medium): A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip…