Every CVE whose affected-product data names X.org Xwayland, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (27)
CVE-2023-6816 — CVSS 9.8 (critical): A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down…
CVE-2023-6377 — CVSS 7.8 (high): A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in…
CVE-2026-50264 — CVSS 7.8 (high): An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests…
CVE-2026-50256 — CVSS 7.8 (high): A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2…
CVE-2026-50257 — CVSS 7.8 (high): A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers…
CVE-2026-50258 — CVSS 7.8 (high): A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized…
CVE-2026-50259 — CVSS 7.8 (high): A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer…
CVE-2026-50260 — CVSS 7.8 (high): A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits…
CVE-2026-50261 — CVSS 7.8 (high): A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can…
CVE-2023-5367 — CVSS 7.8 (high): A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when…
CVE-2024-0229 — CVSS 7.8 (high): An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is…
CVE-2024-0409 — CVSS 7.8 (high): A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the…
CVE-2025-26594 — CVSS 7.8 (high): A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client…
CVE-2025-26595 — CVSS 7.8 (high): A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and…
CVE-2025-26596 — CVSS 7.8 (high): A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in…
CVE-2025-26597 — CVSS 7.8 (high): A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols…
CVE-2025-26598 — CVSS 7.8 (high): An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its…
CVE-2025-26599 — CVSS 7.8 (high): An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate…
CVE-2025-26600 — CVSS 7.8 (high): A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device…
CVE-2025-26601 — CVSS 7.8 (high): A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the…
CVE-2023-6478 — CVSS 7.6 (high): A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer…
CVE-2025-62231 — CVSS 7.3 (high): A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function…
CVE-2025-62230 — CVSS 7.3 (high): A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees…
CVE-2024-0408 — CVSS 5.5 (medium): A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When…
CVE-2026-50262 — CVSS 5.5 (medium): An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation…
CVE-2026-50263 — CVSS 5.5 (medium): A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after…
CVE-2023-5380 — CVSS 4.7 (medium): A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a…