How many CVEs does X.Org x server have?

X.Org x server has 98 published CVE records since 2008.

How many X.Org x server CVEs are in CISA KEV?

None of X.Org x server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for X.Org x server vulnerabilities?

Yes — 5 of X.Org x server's CVEs have a known public exploit.

Which versions of X.Org x server are affected?

204 distinct X.Org x server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in X.Org x server CVEs?

X.Org x server's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-391 (Unchecked Error Condition), CWE-787 (Out-of-bounds Write), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).

How many critical X.Org x server vulnerabilities are there?

X.Org x server has 17 critical and 53 high-severity CVEs.

What is the average severity of X.Org x server CVEs?

The average CVSS base score across X.Org x server's scored CVEs is 7.5.

X.Org x server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every X.Org x server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.19.512 CVEs
< 21.1.239 CVEs
<= 1.16.2.99.9019 CVEs
< 21.1.168 CVEs
1.20.4 <= v <= 1.20.46 CVEs
21.1.0 <= v <= 21.1.06 CVEs
< 1.20.95 CVEs
< 1.20.144 CVEs
< 21.1.114 CVEs
<= 1.19.34 CVEs
21.1.1 <= v <= 21.1.14 CVEs
1.11.0 <= v <= 1.11.03 CVEs
1.16.0 <= v <= 1.16.03 CVEs
1.16.1 <= v <= 1.16.13 CVEs
1.16.1.901 <= v <= 1.16.1.9013 CVEs
1.16.2 <= v <= 1.16.23 CVEs
1.16.2.901 <= v <= 1.16.2.9013 CVEs
< 1.20.102 CVEs
< 21.1.102 CVEs
< 21.1.192 CVEs
< 21.1.62 CVEs
< 21.1.92 CVEs
< 21.2.242 CVEs
<= 1.11.12 CVEs
<= 1.16.22 CVEs
<= 1.16.32 CVEs
1.15.0 <= v <= 1.15.02 CVEs
1.15.0.901 <= v <= 1.15.0.9012 CVEs
1.15.1 <= v <= 1.15.12 CVEs
1.15.2 <= v <= 1.15.22 CVEs
1.15.99.901 <= v <= 1.15.99.9012 CVEs
1.15.99.902 <= v <= 1.15.99.9022 CVEs
1.15.99.903 <= v <= 1.15.99.9032 CVEs
1.15.99.904 <= v <= 1.15.99.9042 CVEs
1.16.0.901 <= v <= 1.16.0.9012 CVEs
1.16.2.99.901 <= v <= 1.16.2.99.9012 CVEs
1.17.0 <= v <= 1.17.02 CVEs
< 1.20.111 CVE
< 1.20.31 CVE
< 1.4.11 CVE
< 21.1.71 CVE
< 21.1.81 CVE
<= 1.19.41 CVE
<= 1.20.41 CVE
>= 1.13.01 CVE
1.10.0 <= v <= 1.10.01 CVE
1.10.0.901 <= v <= 1.10.0.9011 CVE
1.10.0.902 <= v <= 1.10.0.9021 CVE
1.10.1 <= v <= 1.10.11 CVE
1.10.1.901 <= v <= 1.10.1.9011 CVE
1.10.1.902 <= v <= 1.10.1.9021 CVE
1.10.2 <= v <= 1.10.21 CVE
1.10.2.901 <= v <= 1.10.2.9011 CVE
1.10.2.902 <= v <= 1.10.2.9021 CVE
1.10.3 <= v <= 1.10.31 CVE
1.10.3.901 <= v <= 1.10.3.9011 CVE
1.10.3.902 <= v <= 1.10.3.9021 CVE
1.10.4 <= v <= 1.10.41 CVE
1.10.6 <= v <= 1.10.61 CVE
1.10.99.901 <= v <= 1.10.99.9011 CVE
1.10.99.902 <= v <= 1.10.99.9021 CVE
1.11.1 <= v <= 1.11.11 CVE
1.11.1.901 <= v <= 1.11.1.9011 CVE
1.11.1.902 <= v <= 1.11.1.9021 CVE
1.11.2 <= v <= 1.11.21 CVE
1.11.2.901 <= v <= 1.11.2.9011 CVE
1.11.2.902 <= v <= 1.11.2.9021 CVE
1.11.3 <= v <= 1.11.31 CVE
1.11.3.901 <= v <= 1.11.3.9011 CVE
1.11.3.902 <= v <= 1.11.3.9021 CVE
1.11.4 <= v <= 1.11.41 CVE
1.11.99.1 <= v <= 1.11.99.11 CVE
1.11.99.2 <= v <= 1.11.99.21 CVE
1.11.99.901 <= v <= 1.11.99.9011 CVE
1.11.99.902 <= v <= 1.11.99.9021 CVE
1.11.99.903 <= v <= 1.11.99.9031 CVE
1.12.0 <= v <= 1.12.01 CVE
1.12.0.901 <= v <= 1.12.0.9011 CVE
1.12.0.902 <= v <= 1.12.0.9021 CVE
1.12.1.901 <= v <= 1.12.1.9011 CVE
1.12.1.902 <= v <= 1.12.1.9021 CVE
1.12.2 <= v <= 1.12.21 CVE
1.12.2.901 <= v <= 1.12.2.9011 CVE
1.12.2.902 <= v <= 1.12.2.9021 CVE
1.12.3 <= v <= 1.12.31 CVE
1.12.3.901 <= v <= 1.12.3.9011 CVE
1.12.3.902 <= v <= 1.12.3.9021 CVE
1.12.4 <= v <= 1.12.41 CVE
1.12.99.901 <= v <= 1.12.99.9011 CVE
1.12.99.902 <= v <= 1.12.99.9021 CVE
1.12.99.903 <= v <= 1.12.99.9031 CVE
1.12.99.904 <= v <= 1.12.99.9041 CVE
1.12.99.905 <= v <= 1.12.99.9051 CVE
1.13.0 <= v <= 1.13.01 CVE
1.13.0.901 <= v <= 1.13.0.9011 CVE
1.13.0.902 <= v <= 1.13.0.9021 CVE
1.13.1 <= v <= 1.13.11 CVE
1.13.1.901 <= v <= 1.13.1.9011 CVE
1.13.2 <= v <= 1.13.21 CVE
1.13.2.901 <= v <= 1.13.2.9011 CVE
1.13.2.902 <= v <= 1.13.2.9021 CVE
1.13.3 <= v <= 1.13.31 CVE
1.13.4 <= v <= 1.13.41 CVE
1.13.99.901 <= v <= 1.13.99.9011 CVE
1.13.99.902 <= v <= 1.13.99.9021 CVE
1.14.0 <= v <= 1.14.01 CVE
1.14.1 <= v <= 1.14.11 CVE
1.14.1.901 <= v <= 1.14.1.9011 CVE
1.14.1.902 <= v <= 1.14.1.9021 CVE
1.14.2 <= v <= 1.14.21 CVE
1.14.2.901 <= v <= 1.14.2.9011 CVE
1.14.2.902 <= v <= 1.14.2.9021 CVE
1.14.3 <= v <= 1.14.31 CVE
1.14.3.901 <= v <= 1.14.3.9011 CVE
1.14.4 <= v <= 1.14.41 CVE
1.14.4.901 <= v <= 1.14.4.9011 CVE
1.14.5 <= v <= 1.14.51 CVE
1.14.5.901 <= v <= 1.14.5.9011 CVE
1.14.6 <= v <= 1.14.61 CVE
1.14.7 <= v <= 1.14.71 CVE
1.14.99.1 <= v <= 1.14.99.11 CVE
1.14.99.2 <= v <= 1.14.99.21 CVE
1.14.99.3 <= v <= 1.14.99.31 CVE
1.14.99.901 <= v <= 1.14.99.9011 CVE
1.14.99.902 <= v <= 1.14.99.9021 CVE
1.14.99.903 <= v <= 1.14.99.9031 CVE
1.14.99.904 <= v <= 1.14.99.9041 CVE
1.14.99.905 <= v <= 1.14.99.9051 CVE
1.16.3 <= v <= 1.16.31 CVE
1.7.0 <= v <= 1.7.01 CVE
1.7.0.901 <= v <= 1.7.0.9011 CVE
1.7.0.902 <= v <= 1.7.0.9021 CVE
1.7.1 <= v <= 1.7.11 CVE
1.7.1.901 <= v <= 1.7.1.9011 CVE
1.7.1.902 <= v <= 1.7.1.9021 CVE
1.7.2 <= v <= 1.7.21 CVE
1.7.2.901 <= v <= 1.7.2.9011 CVE
1.7.2.902 <= v <= 1.7.2.9021 CVE
1.7.3 <= v <= 1.7.31 CVE
1.7.3.901 <= v <= 1.7.3.9011 CVE
1.7.3.902 <= v <= 1.7.3.9021 CVE
1.7.4 <= v <= 1.7.41 CVE
1.7.4.901 <= v <= 1.7.4.9011 CVE
1.7.4.902 <= v <= 1.7.4.9021 CVE
1.7.5 <= v <= 1.7.51 CVE
1.7.5.901 <= v <= 1.7.5.9011 CVE
1.7.5.902 <= v <= 1.7.5.9021 CVE
1.7.6 <= v <= 1.7.61 CVE
1.7.6.901 <= v <= 1.7.6.9011 CVE
1.7.6.902 <= v <= 1.7.6.9021 CVE
1.7.7 <= v <= 1.7.71 CVE
1.7.99.1 <= v <= 1.7.99.11 CVE
1.7.99.2 <= v <= 1.7.99.21 CVE
1.7.99.901 <= v <= 1.7.99.9011 CVE
1.7.99.902 <= v <= 1.7.99.9021 CVE
1.8.0 <= v <= 1.8.01 CVE
1.8.0.901 <= v <= 1.8.0.9011 CVE
1.8.0.902 <= v <= 1.8.0.9021 CVE
1.8.1 <= v <= 1.8.11 CVE
1.8.1.901 <= v <= 1.8.1.9011 CVE
1.8.1.902 <= v <= 1.8.1.9021 CVE
1.8.2 <= v <= 1.8.21 CVE
1.8.2.901 <= v <= 1.8.2.9011 CVE
1.8.2.902 <= v <= 1.8.2.9021 CVE
1.8.99.901 <= v <= 1.8.99.9011 CVE
1.8.99.902 <= v <= 1.8.99.9021 CVE
1.8.99.903 <= v <= 1.8.99.9031 CVE
1.8.99.904 <= v <= 1.8.99.9041 CVE
1.8.99.905 <= v <= 1.8.99.9051 CVE
1.9.0 <= v <= 1.9.01 CVE
1.9.0.901 <= v <= 1.9.0.9011 CVE
1.9.0.902 <= v <= 1.9.0.9021 CVE
1.9.1 <= v <= 1.9.11 CVE
1.9.2 <= v <= 1.9.21 CVE
1.9.2.901 <= v <= 1.9.2.9011 CVE
1.9.2.902 <= v <= 1.9.2.9021 CVE
1.9.3 <= v <= 1.9.31 CVE
1.9.3.901 <= v <= 1.9.3.9011 CVE
1.9.3.902 <= v <= 1.9.3.9021 CVE
1.9.4 <= v <= 1.9.41 CVE
1.9.4.901 <= v <= 1.9.4.9011 CVE
1.9.5 <= v <= 1.9.51 CVE
1.9.99.901 <= v <= 1.9.99.9011 CVE
1.9.99.902 <= v <= 1.9.99.9021 CVE
1.9.99.903 <= v <= 1.9.99.9031 CVE
20.11 <= v <= 21.1.161 CVE

Fixed in

1.19.512 CVEs
21.1.239 CVEs
21.1.168 CVEs
1.20.95 CVEs
1.20.144 CVEs
21.1.114 CVEs
1.20.102 CVEs
21.1.102 CVEs
21.1.192 CVEs
21.1.62 CVEs
21.1.92 CVEs
21.2.242 CVEs
> 21.1.161 CVE
1.20.111 CVE

Find a version

98 CVEs

Sort

xorg-server / xwayland glamor font atlas Heap Buffer Overflow
CVE-2026-55999
Patch
CWE-122
High · CVSS 8.5
EPSS 0.3% (19th pct)2026-07-08
xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()
CVE-2026-56000
Patch
CWE-416
Critical · CVSS 9.0
EPSS 0.2% (13th pct)2026-07-08
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()
CVE-2026-50263
Patch
CWE-416
Medium · CVSS 5.5
EPSS 0.1% (4th pct)2026-06-05
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes
CVE-2026-50262
Patch
CWE-125
Medium · CVSS 5.5
EPSS 0.1% (3th pct)2026-06-05
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat
CVE-2026-50264
Patch
CWE-787
High · CVSS 7.8
EPSS 0.1% (4th pct)2026-06-05
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()
CVE-2026-50261
Patch
CWE-416
High · CVSS 7.8
EPSS 0.2% (5th pct)2026-06-05
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()
CVE-2026-50260
Patch
CWE-416
High · CVSS 7.8
EPSS 0.2% (5th pct)2026-06-05
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels
CVE-2026-50258
Patch
CWE-121
High · CVSS 7.8
EPSS 0.2% (6th pct)2026-06-05
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing
CVE-2026-50259
Patch
CWE-121
High · CVSS 7.8
EPSS 0.2% (6th pct)2026-06-05
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch
CVE-2026-50256
Patch
CWE-121
High · CVSS 7.8
EPSS 0.2% (5th pct)2026-06-05
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()
CVE-2026-50257
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (4th pct)2026-06-05
Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling
CVE-2026-34002
Patch
Workaround
CWE-805
Critical · CVSS 9.1
EPSS 0.5% (39th pct)2026-05-05
Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.
CVE-2026-34000
Patch
Workaround
CWE-125
Critical · CVSS 9.1
EPSS 0.5% (39th pct)2026-05-05
Xorg: xwayland: use-after-free in xkb client resource removal
CVE-2025-62230
Patch
CWE-416
High · CVSS 7.3
EPSS 0.3% (18th pct)2025-10-30
Xorg: xmayland: value overflow in xkbsetcompatmap()
CVE-2025-62231
Patch
CWE-190
High · CVSS 7.3
EPSS 0.3% (20th pct)2025-10-30
High vulnerability · 2025-03-16
CVE-2022-49737
Public exploit
Patch
CWE-413
High · CVSS 7.7
EPSS 0.3% (24th pct)2025-03-16
Xorg: xwayland: use-after-free in syncinittrigger()
CVE-2025-26601
Patch
CWE-416
High · CVSS 7.8
EPSS 0.4% (31th pct)2025-02-25
Xorg: xwayland: use-after-free in playreleasedevents()
CVE-2025-26600
Patch
CWE-416
High · CVSS 7.8
EPSS 0.4% (31th pct)2025-02-25
Xorg: xwayland: use of uninitialized pointer in compredirectwindow()
CVE-2025-26599
Patch
CWE-824
High · CVSS 7.8
EPSS 0.4% (32th pct)2025-02-25
Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()
CVE-2025-26598
Patch
CWE-787
High · CVSS 7.8
EPSS 0.4% (32th pct)2025-02-25
Xorg: xwayland: buffer overflow in xkbchangetypesofkey()
CVE-2025-26597
Patch
CWE-119
High · CVSS 7.8
EPSS 0.4% (36th pct)2025-02-25
Xorg: xwayland: heap overflow in xkbwritekeysyms()
CVE-2025-26596
Patch
CWE-787
High · CVSS 7.8
EPSS 0.4% (35th pct)2025-02-25
Xorg: xwayland: buffer overflow in xkbvmodmasktext()
CVE-2025-26595
Patch
CWE-121
High · CVSS 7.8
EPSS 0.4% (35th pct)2025-02-25
X.org: xwayland: use-after-free of the root cursor
CVE-2025-26594
Patch
CWE-416
High · CVSS 7.8
EPSS 0.4% (31th pct)2025-02-25
Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
CVE-2024-0229
Patch
CWE-787
High · CVSS 7.8
EPSS 1.2% (66th pct)2024-02-09
Xorg-x11-server: selinux context corruption
CVE-2024-0409
Patch
CWE-787
High · CVSS 7.8
EPSS 0.4% (28th pct)2024-01-18
Xorg-x11-server: selinux unlabeled glx pbuffer
CVE-2024-0408
Patch
CWE-158
Medium · CVSS 5.5
EPSS 0.3% (25th pct)2024-01-18
Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer
CVE-2023-6816
Patch
CWE-787
Critical · CVSS 9.8
EPSS 2.1% (80th pct)2024-01-18
Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty
CVE-2023-6478
Patch
CWE-190
High · CVSS 7.6
EPSS 1.6% (74th pct)2023-12-13
Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions
CVE-2023-6377
Patch
CWE-125
High · CVSS 7.8
EPSS 1.6% (73th pct)2023-12-13

Showing 30 of 98

X.Org x server Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other X.Org products

Frequently asked questions

References

Track X.Org x server vulnerabilities