{"schema_version":1,"title":"X.org X Server vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in X.org X Server: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-93536, was published on 28 October 2026. 11 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/x-org-x-server","json_url":"https://junglewise.ai/threats/technologies/x-org-x-server.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/x-org-x-server","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":6,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":11,"last_90_days":11,"last_365_days":11},"latest":[{"cve":"CVE-2026-93536","cvss":5.3,"slug":"cve-2026-93536-a-use-after-free-caused-by-missing-lifecycle-management-of","title":"X.Org X Server use after free in gesture sprite lifecycle","severity":"medium","exploited":false,"published_at":"2026-10-28T17:18:53.463+00:00","url":"https://junglewise.ai/threats/cve-2026-93536-a-use-after-free-caused-by-missing-lifecycle-management-of"},{"cve":"CVE-2026-93524","slug":"cve-2026-93524-a-buffer-overread-in-checkkeysyms-in-x-org-x-server-before-21-1","title":"X.Org X Server buffer overread in CheckKeySyms","severity":"info","exploited":false,"published_at":"2026-10-28T17:18:53.34+00:00","url":"https://junglewise.ai/threats/cve-2026-93524-a-buffer-overread-in-checkkeysyms-in-x-org-x-server-before-21-1"},{"cve":"CVE-2026-93523","cvss":7.8,"slug":"cve-2026-93523-a-heap-buffer-overflow-caused-by-a-xipassiveungrabdevice-request","title":"X.Org X Server heap buffer overflow in XIPassiveUngrabDevice","severity":"high","exploited":false,"published_at":"2026-10-28T17:18:53.22+00:00","url":"https://junglewise.ai/threats/cve-2026-93523-a-heap-buffer-overflow-caused-by-a-xipassiveungrabdevice-request"},{"cve":"CVE-2026-93522","cvss":7.8,"slug":"cve-2026-93522-a-heap-buffer-overflow-caused-by-mismatched-size-usage-in","title":"X.Org X Server heap buffer overflow in CopyArea CPU-to-FBO","severity":"high","exploited":false,"published_at":"2026-10-28T16:17:10.183+00:00","url":"https://junglewise.ai/threats/cve-2026-93522-a-heap-buffer-overflow-caused-by-mismatched-size-usage-in"},{"cve":"CVE-2026-93521","cvss":7.8,"slug":"cve-2026-93521-a-buffer-overflow-in-randr-changeproviderproperty-requests-in-x","title":"X.Org X Server buffer overflow in RandR ChangeProviderProperty","severity":"high","exploited":false,"published_at":"2026-10-28T16:17:10.06+00:00","url":"https://junglewise.ai/threats/cve-2026-93521-a-buffer-overflow-in-randr-changeproviderproperty-requests-in-x"},{"cve":"CVE-2026-93520","cvss":7.8,"slug":"cve-2026-93520-a-heap-buffer-overflow-caused-by-mismatching-size-calculations","title":"X.org X server heap buffer overflow in XkbAllocNames","severity":"high","exploited":false,"published_at":"2026-10-28T15:17:10.667+00:00","url":"https://junglewise.ai/threats/cve-2026-93520-a-heap-buffer-overflow-caused-by-mismatching-size-calculations"},{"cve":"CVE-2026-93519","cvss":7.8,"slug":"cve-2026-93519-a-buffer-overflow-when-handling-pointer-barriers-in-the-xfixes","title":"X.Org X server buffer overflow in XFIXES pointer barriers","severity":"high","exploited":false,"published_at":"2026-10-28T15:17:10.547+00:00","url":"https://junglewise.ai/threats/cve-2026-93519-a-buffer-overflow-when-handling-pointer-barriers-in-the-xfixes"},{"cve":"CVE-2026-93518","cvss":7.8,"slug":"cve-2026-93518-an-integer-truncation-issue-in-xkbresizekeytype-that-could-lead","title":"X.org X server integer truncation in XkbResizeKeyType heap buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-28T15:17:10.43+00:00","url":"https://junglewise.ai/threats/cve-2026-93518-an-integer-truncation-issue-in-xkbresizekeytype-that-could-lead"},{"cve":"CVE-2026-93517","slug":"cve-2026-93517-a-heap-buffer-overflow-in-handling-glx-renderlarge-request-where","title":"X.org X server and XWayland heap buffer overflow in GLX RenderLarge","severity":"info","exploited":false,"published_at":"2026-10-28T14:17:08.843+00:00","url":"https://junglewise.ai/threats/cve-2026-93517-a-heap-buffer-overflow-in-handling-glx-renderlarge-request-where"},{"cve":"CVE-2026-93516","cvss":5.5,"slug":"cve-2026-93516-a-use-after-free-caused-by-lack-of-lifecycle-management-when","title":"X.org X Server use-after-free in XInput device lifecycle","severity":"medium","exploited":false,"published_at":"2026-10-28T13:17:29.237+00:00","url":"https://junglewise.ai/threats/cve-2026-93516-a-use-after-free-caused-by-lack-of-lifecycle-management-when"},{"cve":"CVE-2026-93515","slug":"cve-2026-93515-a-use-after-free-in-present-clear-window-notifies-in-the-x-org-x","title":"X.org X Server use-after-free in present_clear_window_notifies","severity":"info","exploited":false,"published_at":"2026-10-28T13:17:29.083+00:00","url":"https://junglewise.ai/threats/cve-2026-93515-a-use-after-free-in-present-clear-window-notifies-in-the-x-org-x"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"X.org XWayland","slug":"x-org-xwayland","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/x-org-xwayland"},{"name":"X.org libXi","slug":"libxi","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/libxi"},{"name":"X.org libXfont2","slug":"libxfont2","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/libxfont2"},{"name":"X.org Xorg-Server","slug":"xorg-server","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/xorg-server"},{"name":"X.org libX11","slug":"libx11","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/libx11"}],"technology":{"hub":true,"name":"X.org X Server","slug":"x-org-x-server","vendor":{"hub":true,"name":"X.org","slug":"x-org","url":"https://junglewise.ai/threats/vendors/x-org"},"aliases":[],"category":"os","description":"Display server implementing the X Window System protocol for Unix-like systems.","url":"https://junglewise.ai/threats/technologies/x-org-x-server"},"most_severe":[{"cve":"CVE-2026-93523","cvss":7.8,"slug":"cve-2026-93523-a-heap-buffer-overflow-caused-by-a-xipassiveungrabdevice-request","title":"X.Org X Server heap buffer overflow in XIPassiveUngrabDevice","severity":"high","exploited":false,"published_at":"2026-10-28T17:18:53.22+00:00","url":"https://junglewise.ai/threats/cve-2026-93523-a-heap-buffer-overflow-caused-by-a-xipassiveungrabdevice-request"},{"cve":"CVE-2026-93522","cvss":7.8,"slug":"cve-2026-93522-a-heap-buffer-overflow-caused-by-mismatched-size-usage-in","title":"X.Org X Server heap buffer overflow in CopyArea CPU-to-FBO","severity":"high","exploited":false,"published_at":"2026-10-28T16:17:10.183+00:00","url":"https://junglewise.ai/threats/cve-2026-93522-a-heap-buffer-overflow-caused-by-mismatched-size-usage-in"},{"cve":"CVE-2026-93521","cvss":7.8,"slug":"cve-2026-93521-a-buffer-overflow-in-randr-changeproviderproperty-requests-in-x","title":"X.Org X Server buffer overflow in RandR ChangeProviderProperty","severity":"high","exploited":false,"published_at":"2026-10-28T16:17:10.06+00:00","url":"https://junglewise.ai/threats/cve-2026-93521-a-buffer-overflow-in-randr-changeproviderproperty-requests-in-x"},{"cve":"CVE-2026-93520","cvss":7.8,"slug":"cve-2026-93520-a-heap-buffer-overflow-caused-by-mismatching-size-calculations","title":"X.org X server heap buffer overflow in XkbAllocNames","severity":"high","exploited":false,"published_at":"2026-10-28T15:17:10.667+00:00","url":"https://junglewise.ai/threats/cve-2026-93520-a-heap-buffer-overflow-caused-by-mismatching-size-calculations"},{"cve":"CVE-2026-93519","cvss":7.8,"slug":"cve-2026-93519-a-buffer-overflow-when-handling-pointer-barriers-in-the-xfixes","title":"X.Org X server buffer overflow in XFIXES pointer barriers","severity":"high","exploited":false,"published_at":"2026-10-28T15:17:10.547+00:00","url":"https://junglewise.ai/threats/cve-2026-93519-a-buffer-overflow-when-handling-pointer-barriers-in-the-xfixes"},{"cve":"CVE-2026-93518","cvss":7.8,"slug":"cve-2026-93518-an-integer-truncation-issue-in-xkbresizekeytype-that-could-lead","title":"X.org X server integer truncation in XkbResizeKeyType heap buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-28T15:17:10.43+00:00","url":"https://junglewise.ai/threats/cve-2026-93518-an-integer-truncation-issue-in-xkbresizekeytype-that-could-lead"},{"cve":"CVE-2026-93516","cvss":5.5,"slug":"cve-2026-93516-a-use-after-free-caused-by-lack-of-lifecycle-management-when","title":"X.org X Server use-after-free in XInput device lifecycle","severity":"medium","exploited":false,"published_at":"2026-10-28T13:17:29.237+00:00","url":"https://junglewise.ai/threats/cve-2026-93516-a-use-after-free-caused-by-lack-of-lifecycle-management-when"},{"cve":"CVE-2026-93536","cvss":5.3,"slug":"cve-2026-93536-a-use-after-free-caused-by-missing-lifecycle-management-of","title":"X.Org X Server use after free in gesture sprite lifecycle","severity":"medium","exploited":false,"published_at":"2026-10-28T17:18:53.463+00:00","url":"https://junglewise.ai/threats/cve-2026-93536-a-use-after-free-caused-by-missing-lifecycle-management-of"},{"cve":"CVE-2026-93524","slug":"cve-2026-93524-a-buffer-overread-in-checkkeysyms-in-x-org-x-server-before-21-1","title":"X.Org X Server buffer overread in CheckKeySyms","severity":"info","exploited":false,"published_at":"2026-10-28T17:18:53.34+00:00","url":"https://junglewise.ai/threats/cve-2026-93524-a-buffer-overread-in-checkkeysyms-in-x-org-x-server-before-21-1"},{"cve":"CVE-2026-93517","slug":"cve-2026-93517-a-heap-buffer-overflow-in-handling-glx-renderlarge-request-where","title":"X.org X server and XWayland heap buffer overflow in GLX RenderLarge","severity":"info","exploited":false,"published_at":"2026-10-28T14:17:08.843+00:00","url":"https://junglewise.ai/threats/cve-2026-93517-a-heap-buffer-overflow-in-handling-glx-renderlarge-request-where"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}