How many X.Org xorg-server CVEs are in CISA KEV?

None of X.Org xorg-server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of X.Org xorg-server are affected?

12 distinct X.Org xorg-server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in X.Org xorg-server CVEs?

X.Org xorg-server's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-126 (Buffer Over-read), CWE-125 (Out-of-bounds Read), CWE-158 (Improper Neutralization of Null Byte or NUL Character).

What is the average severity of X.Org xorg-server CVEs?

The average CVSS base score across X.Org xorg-server's scored CVEs is 6.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

X.Org

12 CVEs

X.Org xorg-server Vulnerabilities

Name: X.Org xorg-server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for xorg-server by X.Org.

12

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.9

Avg CVSS

2006–2026

Last updated July 8, 2026

Overview

X.Org xorg-server has 12 published CVE records since 2006, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting X.Org xorg-server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of X.Org xorg-server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High9

Medium2

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of X.Org xorg-server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No X.Org xorg-server CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every X.Org xorg-server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 21.1.241 CVE
1.01 <= v <= 1.011 CVE
1.02 <= v <= 1.021 CVE
1.02_r5 <= v <= 1.02_r51 CVE
1.1 <= v <= 1.11 CVE
1.16.4 <= v <= 1.16.41 CVE
1.16.99.901 <= v <= 1.16.99.9011 CVE
1.16.99.902 <= v <= 1.16.99.9021 CVE
1.17.1 <= v <= 1.17.11 CVE
1.2 <= v <= 1.21 CVE
1.3 <= v <= 1.31 CVE

Fixed in

21.1.241 CVE

Find a version

12 CVEs

Sort

xorg-server / xwayland glamor font atlas Heap Buffer Overflow
CVE-2026-55999
Patch
CWE-122
High · CVSS 8.5
EPSS 0.2% (12th pct)2026-07-08
Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap
CVE-2024-31082
Patch
CWE-126
High · CVSS 7.3
EPSS 0.3% (26th pct)2024-04-04
Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents
CVE-2024-31080
Patch
CWE-126
High · CVSS 7.3
EPSS 0.5% (40th pct)2024-04-04
Xorg-x11-server: heap buffer overflow in disabledevice
CVE-2024-21886
Patch
CWE-122
High · CVSS 7.8
EPSS 1.4% (70th pct)2024-02-28
Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent
CVE-2024-21885
Patch
CWE-122
High · CVSS 7.8
EPSS 1.4% (70th pct)2024-02-28
Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
CVE-2024-0229
Patch
CWE-787
High · CVSS 7.8
EPSS 1.2% (66th pct)2024-02-09
Xorg-x11-server: selinux unlabeled glx pbuffer
CVE-2024-0408
Patch
CWE-158
Medium · CVSS 5.5
EPSS 0.3% (24th pct)2024-01-18
Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions
CVE-2023-6377
Patch
CWE-125
High · CVSS 7.8
EPSS 1.6% (73th pct)2023-12-13
High vulnerability · 2023-03-30
CVE-2023-1393
Patch
CWE-416
High · CVSS 7.8
EPSS 0.4% (36th pct)2023-03-30
Low vulnerability · 2015-07-01
CVE-2015-3164
Patch
Low · CVSS 3.6
EPSS 0.4% (32th pct)2015-07-01
Medium vulnerability · 2007-09-11
CVE-2007-4730
Patch
Medium · CVSS 4.3
EPSS 0.5% (40th pct)2007-09-11
High vulnerability · 2006-08-30
CVE-2006-4447
Patch
High · CVSS 7.2
EPSS 0.4% (35th pct)2006-08-30

Common weakness types

The CWE weakness categories most often found in X.Org xorg-server CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many X.Org xorg-server CVEs were published each year.

2006

1

2007

1

2015

1

2023

2

2024

6

2026

1

Other X.Org products

Browse vulnerabilities for other products by X.Org.

x server98 CVEs xserver67 CVEs xwayland38 CVEs xorg-x11-server25 CVEs x1120 CVEs libx1115 CVEs libxfont8 CVEs x11r68 CVEs

All X.Org vulnerabilities

Frequently asked questions

Common questions about X.Org xorg-server vulnerabilities.

How many CVEs does X.Org xorg-server have?: X.Org xorg-server has 12 published CVE records since 2006.
How many X.Org xorg-server CVEs are in CISA KEV?: None of X.Org xorg-server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for X.Org xorg-server vulnerabilities?: No X.Org xorg-server CVEs currently have a tracked public exploit in this dataset.
Which versions of X.Org xorg-server are affected?: 12 distinct X.Org xorg-server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in X.Org xorg-server CVEs?: X.Org xorg-server's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-126 (Buffer Over-read), CWE-125 (Out-of-bounds Read), CWE-158 (Improper Neutralization of Null Byte or NUL Character).
What is the average severity of X.Org xorg-server CVEs?: The average CVSS base score across X.Org xorg-server's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track X.Org xorg-server vulnerabilities

Monitor new X.Org xorg-server vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing