X.Org Xorg Server vulnerabilities
4 vulnerabilities
Known vulnerabilities in X.Org Xorg Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2015-3164debianxorg-server+5
EPSS score0.39%
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.CVE-2007-4730debianxorg-server+19EPSS score0.51%
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.CVE-2026-55999chainguardxorg-server+31EPSS score0.33%
Local attackers with a X connection able to provide PCX fonts to the X
server xorg-server before 21.2.24 and xwayland before 24.1.13 could
cause a heap buffer overflow via SetFont due to missing glyph boundary checks.CVE-2006-4447debianlibx11+13EPSS score0.45%
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.