Xfree86 Project Xfree86 X Server — known CVE vulnerabilities

Every CVE whose affected-product data names Xfree86 Project Xfree86 X Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2006-6102 — CVSS 10.0 (critical): Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server…
• CVE-2001-1409 — CVSS 3.6 (low): dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or…