Xscreensaver Project Xscreensaver — known CVE vulnerabilities

Every CVE whose affected-product data names Xscreensaver Project Xscreensaver, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2011-2187 — CVSS 7.8 (high): xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which…
• CVE-2021-31523 — CVSS 7.8 (high): The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/sonar file, which…
• CVE-2021-34557 — CVSS 4.6 (medium): XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in…
• CVE-2015-8025 — CVSS 2.1 (low): driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate…