{"schema_version":1,"title":"Freedesktop vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 15 vulnerabilities in Freedesktop: 1 in the last 7 days and 9 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-120749, was published on 6 November 2026. 4 vulnerabilities in the last four weeks, down 20% on the four before (5).","url":"https://junglewise.ai/threats/vendors/freedesktop","json_url":"https://junglewise.ai/threats/vendors/freedesktop.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/freedesktop","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":true,"counts":{"high":4,"all_time":15,"critical":1,"exploited":0,"last_7_days":1,"last_30_days":4,"last_90_days":9,"last_365_days":14},"latest":[{"cve":"CVE-2026-120749","cvss":6.2,"slug":"cve-2026-120749-a-flaw-was-found-in-d-bus-with-a-privileged-monitoring-client","title":"D-Bus daemon denial of service via monitored broadcast message failure","severity":"medium","exploited":false,"published_at":"2026-11-06T07:17:06.153+00:00","url":"https://junglewise.ai/threats/cve-2026-120749-a-flaw-was-found-in-d-bus-with-a-privileged-monitoring-client"},{"cve":"CVE-2026-120830","cvss":7.4,"slug":"cve-2026-120830-a-flaw-was-found-in-libslirp-in-icmp-forward-error-when-building","title":"libslirp out-of-bounds heap read in icmp_forward_error()","severity":"high","exploited":false,"published_at":"2026-11-03T00:17:18.947+00:00","url":"https://junglewise.ai/threats/cve-2026-120830-a-flaw-was-found-in-libslirp-in-icmp-forward-error-when-building"},{"cve":"CVE-2026-109088","cvss":6.5,"slug":"cve-2026-109088-a-malicious-x-server-could-send-malformed-record-enablecontext","title":"libXtst infinite loop in RECORD EnableContext reply parsing","severity":"medium","exploited":false,"published_at":"2026-10-27T17:16:57.68+00:00","url":"https://junglewise.ai/threats/cve-2026-109088-a-malicious-x-server-could-send-malformed-record-enablecontext"},{"cve":"CVE-2026-112271","cvss":5.5,"slug":"cve-2026-112271-libdisplay-info-through-0-4-0-contains-a-heap-out-of-bounds-read","title":"libdisplay-info heap out-of-bounds read in DisplayID parser","severity":"medium","exploited":false,"published_at":"2026-10-19T14:17:04.787+00:00","url":"https://junglewise.ai/threats/cve-2026-112271-libdisplay-info-through-0-4-0-contains-a-heap-out-of-bounds-read"},{"cve":"CVE-2026-107705","cvss":6.5,"epss":0.0033,"slug":"cve-2026-107705-poppler-0-42-0-through-26-10-0-contains-a-stack-based-buffer","title":"Poppler stack-based buffer overflow in Decrypt::revision6Hash()","severity":"medium","exploited":false,"published_at":"2026-10-08T20:17:35.3+00:00","url":"https://junglewise.ai/threats/cve-2026-107705-poppler-0-42-0-through-26-10-0-contains-a-stack-based-buffer"},{"cve":"CVE-2026-94287","cvss":5.5,"slug":"cve-2026-94287-a-denial-of-service-via-unsigned-underflow-in-libxpm-s-write-path","title":"libXpm unsigned integer underflow in write path","severity":"medium","exploited":false,"published_at":"2026-09-28T09:17:08.577+00:00","url":"https://junglewise.ai/threats/cve-2026-94287-a-denial-of-service-via-unsigned-underflow-in-libxpm-s-write-path"},{"cve":"CVE-2026-94286","cvss":7.1,"slug":"cve-2026-94286-an-out-of-bounds-read-in-libxtst-s-record-reply-parser-in-libxtst","title":"libXtst out-of-bounds read in RECORD reply parser","severity":"high","exploited":false,"published_at":"2026-09-28T09:17:08.463+00:00","url":"https://junglewise.ai/threats/cve-2026-94286-an-out-of-bounds-read-in-libxtst-s-record-reply-parser-in-libxtst"},{"cve":"CVE-2026-94282","cvss":5.6,"slug":"cve-2026-94282-an-out-of-bounds-read-in-libxi-s-xi2-enter-leave-focus-cookie","title":"libXi out-of-bounds read in XI2 enter/leave/focus event parsing","severity":"medium","exploited":false,"published_at":"2026-09-28T09:17:08.003+00:00","url":"https://junglewise.ai/threats/cve-2026-94282-an-out-of-bounds-read-in-libxi-s-xi2-enter-leave-focus-cookie"},{"cve":"CVE-2026-96808","cvss":7.4,"epss":0.0012,"slug":"cve-2026-96808-in-flatpak-before-1-18-1-the-revokefs-writer-used-by-the-flatpak","title":"Flatpak revokefs symlink path traversal privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-23T17:17:25.86+00:00","url":"https://junglewise.ai/threats/cve-2026-96808-in-flatpak-before-1-18-1-the-revokefs-writer-used-by-the-flatpak"},{"cve":"CVE-2026-35094","cvss":3.3,"epss":0.0014,"slug":"cve-2026-35094-a-flaw-was-found-in-libinput-an-attacker-capable-of-deploying-a","title":"A flaw was found in libinput. An attacker capable of deploying a Lua plugin file in specific system directories can…","severity":"low","exploited":false,"published_at":"2026-04-01T14:16:57.637+00:00","url":"https://junglewise.ai/threats/cve-2026-35094-a-flaw-was-found-in-libinput-an-attacker-capable-of-deploying-a"},{"cve":"CVE-2026-4897","cvss":5.5,"epss":0.0016,"slug":"cve-2026-4897-a-flaw-was-found-in-polkit-a-local-user-can-exploit-this-by","title":"A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to…","severity":"medium","exploited":false,"published_at":"2026-03-26T15:16:43.017+00:00","url":"https://junglewise.ai/threats/cve-2026-4897-a-flaw-was-found-in-polkit-a-local-user-can-exploit-this-by"},{"cve":"CVE-2026-1940","cvss":5.1,"epss":0.0023,"slug":"cve-2026-1940-an-incomplete-fix-for-allows-an-out-of-bounds-read-in-gst-wavparse","title":"An incomplete fix for allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation c","severity":"medium","exploited":false,"published_at":"2026-03-23T22:16:25.043+00:00","url":"https://junglewise.ai/threats/cve-2026-1940-an-incomplete-fix-for-allows-an-out-of-bounds-read-in-gst-wavparse"},{"cve":"CVE-2026-26104","cvss":5.5,"epss":0.0008,"slug":"cve-2026-26104-a-flaw-was-found-in-the-udisks-storage-management-daemon-that","title":"A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption…","severity":"medium","exploited":false,"published_at":"2026-02-25T11:16:03.193+00:00","url":"https://junglewise.ai/threats/cve-2026-26104-a-flaw-was-found-in-the-udisks-storage-management-daemon-that"},{"cve":"CVE-2026-26103","cvss":7.1,"epss":0.0007,"slug":"cve-2026-26103-udisks-missing-authorization-in-luks-header-restoration-api","title":"udisks missing authorization in LUKS header restoration API","severity":"high","exploited":false,"published_at":"2026-02-25T11:16:02.983+00:00","url":"https://junglewise.ai/threats/cve-2026-26103-udisks-missing-authorization-in-luks-header-restoration-api"},{"cve":"CVE-2016-2090","cvss":9.8,"slug":"cve-2016-2090-freedesktop-libbsd-heap-buffer-overflow-in-fgetwln","title":"freedesktop libbsd heap buffer overflow in fgetwln","severity":"critical","exploited":false,"published_at":"2017-01-13T16:59:00.167+00:00","url":"https://junglewise.ai/threats/cve-2016-2090-freedesktop-libbsd-heap-buffer-overflow-in-fgetwln"}],"vendor":{"hub":true,"name":"Freedesktop","slug":"freedesktop","homepage":"https://www.freedesktop.org/","description":"Freedesktop is an organization that maintains specifications and standards for interoperability in open-source desktop environments.","url":"https://junglewise.ai/threats/vendors/freedesktop"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2016-2090","cvss":9.8,"slug":"cve-2016-2090-freedesktop-libbsd-heap-buffer-overflow-in-fgetwln","title":"freedesktop libbsd heap buffer overflow in fgetwln","severity":"critical","exploited":false,"published_at":"2017-01-13T16:59:00.167+00:00","url":"https://junglewise.ai/threats/cve-2016-2090-freedesktop-libbsd-heap-buffer-overflow-in-fgetwln"},{"cve":"CVE-2026-96808","cvss":7.4,"epss":0.0012,"slug":"cve-2026-96808-in-flatpak-before-1-18-1-the-revokefs-writer-used-by-the-flatpak","title":"Flatpak revokefs symlink path traversal privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-23T17:17:25.86+00:00","url":"https://junglewise.ai/threats/cve-2026-96808-in-flatpak-before-1-18-1-the-revokefs-writer-used-by-the-flatpak"},{"cve":"CVE-2026-120830","cvss":7.4,"slug":"cve-2026-120830-a-flaw-was-found-in-libslirp-in-icmp-forward-error-when-building","title":"libslirp out-of-bounds heap read in icmp_forward_error()","severity":"high","exploited":false,"published_at":"2026-11-03T00:17:18.947+00:00","url":"https://junglewise.ai/threats/cve-2026-120830-a-flaw-was-found-in-libslirp-in-icmp-forward-error-when-building"},{"cve":"CVE-2026-26103","cvss":7.1,"epss":0.0007,"slug":"cve-2026-26103-udisks-missing-authorization-in-luks-header-restoration-api","title":"udisks missing authorization in LUKS header restoration API","severity":"high","exploited":false,"published_at":"2026-02-25T11:16:02.983+00:00","url":"https://junglewise.ai/threats/cve-2026-26103-udisks-missing-authorization-in-luks-header-restoration-api"},{"cve":"CVE-2026-94286","cvss":7.1,"slug":"cve-2026-94286-an-out-of-bounds-read-in-libxtst-s-record-reply-parser-in-libxtst","title":"libXtst out-of-bounds read in RECORD reply parser","severity":"high","exploited":false,"published_at":"2026-09-28T09:17:08.463+00:00","url":"https://junglewise.ai/threats/cve-2026-94286-an-out-of-bounds-read-in-libxtst-s-record-reply-parser-in-libxtst"},{"cve":"CVE-2026-107705","cvss":6.5,"epss":0.0033,"slug":"cve-2026-107705-poppler-0-42-0-through-26-10-0-contains-a-stack-based-buffer","title":"Poppler stack-based buffer overflow in Decrypt::revision6Hash()","severity":"medium","exploited":false,"published_at":"2026-10-08T20:17:35.3+00:00","url":"https://junglewise.ai/threats/cve-2026-107705-poppler-0-42-0-through-26-10-0-contains-a-stack-based-buffer"},{"cve":"CVE-2026-109088","cvss":6.5,"slug":"cve-2026-109088-a-malicious-x-server-could-send-malformed-record-enablecontext","title":"libXtst infinite loop in RECORD EnableContext reply parsing","severity":"medium","exploited":false,"published_at":"2026-10-27T17:16:57.68+00:00","url":"https://junglewise.ai/threats/cve-2026-109088-a-malicious-x-server-could-send-malformed-record-enablecontext"},{"cve":"CVE-2026-120749","cvss":6.2,"slug":"cve-2026-120749-a-flaw-was-found-in-d-bus-with-a-privileged-monitoring-client","title":"D-Bus daemon denial of service via monitored broadcast message failure","severity":"medium","exploited":false,"published_at":"2026-11-06T07:17:06.153+00:00","url":"https://junglewise.ai/threats/cve-2026-120749-a-flaw-was-found-in-d-bus-with-a-privileged-monitoring-client"},{"cve":"CVE-2026-94282","cvss":5.6,"slug":"cve-2026-94282-an-out-of-bounds-read-in-libxi-s-xi2-enter-leave-focus-cookie","title":"libXi out-of-bounds read in XI2 enter/leave/focus event parsing","severity":"medium","exploited":false,"published_at":"2026-09-28T09:17:08.003+00:00","url":"https://junglewise.ai/threats/cve-2026-94282-an-out-of-bounds-read-in-libxi-s-xi2-enter-leave-focus-cookie"},{"cve":"CVE-2026-4897","cvss":5.5,"epss":0.0016,"slug":"cve-2026-4897-a-flaw-was-found-in-polkit-a-local-user-can-exploit-this-by","title":"A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to…","severity":"medium","exploited":false,"published_at":"2026-03-26T15:16:43.017+00:00","url":"https://junglewise.ai/threats/cve-2026-4897-a-flaw-was-found-in-polkit-a-local-user-can-exploit-this-by"}],"generated_at":"2026-11-10T03:07:00.198065+00:00","technologies":[]}