LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

X.Org

9 CVEs published in the last four months and 2 stories. Exploited flaws first.

Critical0
High9
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-559998.5highx serverLocal attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayl96d ago
CVE-2026-502577.8highx serverA use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence().128d ago
CVE-2026-502587.8highx serverA stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.128d ago
CVE-2026-502597.8highx serverA stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.128d ago
CVE-2026-502607.8highx serverA use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter().128d ago
CVE-2026-502617.8highx serverA use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter().128d ago
CVE-2026-502647.8highx serverAn out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat.128d ago
CVE-2026-502567.8highx serverA stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.128d ago
CVE-2026-560007.8highx serverLocal attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xway96d ago

Filter the full tracker by X.Org →

Our coverage of X.Org

CVE-2026-93524

Check your X.Org server version because a dozen vulnerabilities have been patched

X.Org has released patches for a dozen security vulnerabilities affecting its X server and Xwayland components, with updates available in versions xorg-server 21.1.25 and xwayland-24.1.14. Nine of these flaws are critical, potentially allowing for arbitrary code execution, while the remaining three could lead to server crashes or information disclosure.

xorg serverhigh

ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability

A critical use-after-free vulnerability has been identified in the X.Org Server, potentially leading to sensitive information disclosure and privilege escalation. The vulnerability, tracked as ZDI-26-397, resides in the server's management of ScreenSaverScreenPrivateRec objects. It arises from an insufficient validation process, where the server performs operations on an object without first…