Výsledky hledání

ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93523.

CVSS 7.8 CVE-2026-93523 X.Org US

tg: zranitelnost

15. 10. 2026 · zachyceno 23:02 · Zero Day Initiative · ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2026-93524.

CVSS 6.1 CVE-2026-93524 X.Org US

tg: zranitelnost

15. 10. 2026 · zachyceno 23:02 · Zero Day Initiative · ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-88812.

CVSS 7.8 CVE-2026-88812 X.Org US

tg: zranitelnost

15. 10. 2026 · zachyceno 22:30 · Zero Day Initiative · ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability

ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-93515.

CVSS 5.5 CVE-2026-93515 X.Org US

tg: zranitelnost

15. 10. 2026 · zachyceno 22:30 · Zero Day Initiative · ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability

ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-93516.

CVSS 5.5 CVE-2026-93516 X.Org US

tg: zranitelnost

15. 10. 2026 · zachyceno 22:30 · Zero Day Initiative · ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability

ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93517.

CVSS 7.8 CVE-2026-93517 X.Org US

tg: zranitelnost

15. 10. 2026 · zachyceno 22:30 · Zero Day Initiative · ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93518.

CVSS 7.8 CVE-2026-93518 X.Org US

tg: zranitelnost

15. 10. 2026 · zachyceno 22:30 · Zero Day Initiative · ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability

ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93519.

CVSS 7.8 CVE-2026-93519 X.Org US

tg: zranitelnost

15. 10. 2026 · zachyceno 22:30 · Zero Day Initiative · ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93520.

CVSS 7.8 CVE-2026-93520 X.Org US

tg: zranitelnost

15. 10. 2026 · zachyceno 22:30 · Zero Day Initiative · ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93521.

CVSS 7.8 CVE-2026-93521 X.Org US

tg: zranitelnost

15. 10. 2026 · zachyceno 22:30 · Zero Day Initiative · ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93522.

CVSS 7.8 CVE-2026-93522 X.Org US

tg: zranitelnost

15. 10. 2026 · zachyceno 22:30 · Zero Day Initiative · ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability

Risolte vulnerabilità in prodotti X.Org

Rilasciati aggiornamenti di sicurezza per X server, componente fondamentale del sistema grafico utilizzato in numerosi ambienti Unix e Linux, e per Xwayland, livello di compatibilità che consente l'esecuzione di applicazioni X11 in ambienti Wayland. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di compromettere la disponibilità del servizio, accedere ad informazioni sensibili ed eseguire codice arbitrario sui sistemi interessati.

CVE-2026-88812 CVE-2026-93515 CVE-2026-93516 CVE-2026-93517 CVE-2026-93518 CVE-2026-93519 CVE-2026-93520 CVE-2026-93521 CVE-2026-93522 CVE-2026-93523 CVE-2026-93524 CVE-2026-93536 X.Org IT

tg: zranitelnost

8. 10. 2026 11:35 · CSIRT Itálie (ACN) · Risolte vulnerabilità in prodotti X.Org

SPOJENO PŘES CVE ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-56001.

EPSS 0.00 CVSS 7.8 CVE-2026-56001 X.Org US

15. 7. 2026 · Zero Day Initiative · ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability 9. 7. 2026 · Microsoft Security · CVE-2026-56001 libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

SPOJENO PŘES CVE ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-56002.

EPSS 0.00 CVSS 7.8 CVE-2026-56002 X.Org US

15. 7. 2026 · Zero Day Initiative · ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability 9. 7. 2026 · Microsoft Security · CVE-2026-56002 libXfont2 PCF Font Parsing Heap Buffer Overflow

SPOJENO PŘES CVE ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-56003.

EPSS 0.00 CVSS 7.8 CVE-2026-56003 X.Org libXfont2 US

15. 7. 2026 · Zero Day Initiative · ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability 9. 7. 2026 · Microsoft Security · CVE-2026-56003 libXfont2 computeProps Property Buffer Heap Buffer Overflow

SPOJENO PŘES CVE ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-55999.

EPSS 0.00 CVSS 7.8 CVE-2026-55999 X.Org US

15. 7. 2026 · Zero Day Initiative · ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability 9. 7. 2026 · Microsoft Security · CVE-2026-55999 xorg-server / xwayland glamor font atlas Heap Buffer Overflow

ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50257.

EPSS 0.00 CVSS 7.8 CVE-2026-50257 X.Org US

24. 6. 2026 · Zero Day Initiative · ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability

ZDI-26-392: X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50258.

EPSS 0.00 CVSS 7.8 CVE-2026-50258 X.Org US

24. 6. 2026 · Zero Day Initiative · ZDI-26-392: X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-26-393: X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50259.

EPSS 0.00 CVSS 7.8 CVE-2026-50259 X.Org US

24. 6. 2026 · Zero Day Initiative · ZDI-26-393: X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-26-394: X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50260.

EPSS 0.00 CVSS 7.8 CVE-2026-50260 X.Org US

24. 6. 2026 · Zero Day Initiative · ZDI-26-394: X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability

ZDI-26-395: X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50261.

EPSS 0.00 CVSS 7.8 CVE-2026-50261 X.Org US

24. 6. 2026 · Zero Day Initiative · ZDI-26-395: X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability