CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

X.Org — security advisories

17 advisorieslatest 2026-08-25⚡ RSS feed

Tracked X.Org products:

X.Org X11 and Xwayland X11, Xwayland xorg-x11-server Xwayland xorg-server libXfont2 X11 Server (libXfont2)X11 (libXfont2)X11

⚡ Watch X.Org

Get an email when a new X.Org advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [medium] X.Org X11 (libXfont2): Multiple vulnerabilities enable privilege escalation and denial of service

mediumCVE-2026-44950 CVE-2026-59679cert-bund2026-08-25

[UPDATE] [medium] X.Org X11, Xwayland: Multiple vulnerabilities

mediumCVE-2026-33999 CVE-2026-34000 CVE-2026-34001 CVE-2026-34002cert-bund2026-08-17

[UPDATE] [high] Xwayland and X.Org X11: Multiple vulnerabilities allow unspecified attack

highCVE-2025-62229 CVE-2025-62230 CVE-2025-62231cert-bund2026-08-17

[UPDATE] [medium] X.Org X11 and Xwayland: Multiple vulnerabilities

mediumCVE-2025-49175 CVE-2025-49176 CVE-2025-49177 CVE-2025-49178cert-bund2026-08-17

[NEW] [high] X.Org X11 and Xwayland: Multiple vulnerabilities allow code execution and DoS

highCVE-2026-55999 CVE-2026-56000cert-bund2026-08-17

[UPDATE] [medium] X.Org X11 and Xwayland: Multiple vulnerabilities

mediumCVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259cert-bund2026-08-17

[UPDATE] [medium] X.Org X11: Multiple vulnerabilities allow unspecified effects, possibly code execution

mediumCVE-2025-26594 CVE-2025-26595 CVE-2025-26596 CVE-2025-26597cert-bund2026-08-14

[UPDATE] [high] X.Org X11: Vulnerability enables denial of service

highCVE-2022-49737cert-bund2026-08-13

[NEW] [medium] X.Org X11 Server (libXfont2): Multiple vulnerabilities allow execution of arbitrary code with administrator privileges

mediumCVE-2026-56001 CVE-2026-56002 CVE-2026-56003cert-bund2026-08-13

CVE-2026-34001: Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption

highCVSS 7.8CVE-2026-34001msrc2026-08-06

CVE-2026-34003: Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access

highCVSS 7.1CVE-2026-34003msrc2026-08-06

CVE-2026-55999: xorg-server / xwayland glamor font atlas Heap Buffer Overflow

highCVSS 8.5CVE-2026-55999msrc2026-07-14

CVE-2026-56002: libXfont2 PCF Font Parsing Heap Buffer Overflow

highCVSS 8.5CVE-2026-56002msrc2026-07-14

CVE-2026-56000: xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

unknownCVE-2026-56000msrc2026-07-14

CVE-2026-50259: Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing

highCVSS 7.8CVE-2026-50259msrc2026-06-09

CVE-2026-50261: Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()

highCVSS 7.8CVE-2026-50261msrc2026-06-09

CVE-2026-50262: Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes

mediumCVSS 5.5CVE-2026-50262msrc2026-06-09