https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:22:58.544702+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1804 ALSA-2021:1804 — Moderate: userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update 2026-10-03T17:22:58.831186+00:00

Affected: AlmaLinux:8: libglvnd, AlmaLinux:8: libglvnd-core-devel, AlmaLinux:8: libglvnd-devel, AlmaLinux:8: libglvnd-egl, AlmaLinux:8: libglvnd-gles, AlmaLinux:8: libglvnd-glx, AlmaLinux:8: libglvnd-opengl, AlmaLinux:8: libinput-devel, AlmaLinux:8: libwacom-devel, AlmaLinux:8: mesa-libOSMesa-devel and 4 more

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Mesa provides a 3D graphics API that is compatible with Open Graphics Library (OpenGL). It also provides hardware-accelerated drivers for many popular graphics chips.

The following packages have been upgraded to a later upstream version: egl-wayland (1.1.5), libdrm (2.4.103), libglvnd (1.3.2), libinput (1.16.3), libwacom (1.6), mesa (20.3.3), xorg-x11-server (1.20.10). (BZ#1878160, BZ#1886648, BZ#1887654, BZ#1887655)

Security Fix(es):

* xorg-x11-server: Out-of-bounds access in XkbSetNames function (CVE-2020-14345)

* xorg-x11-server: Integer underflow in the X input extension protocol (CVE-2020-14346)

* xorg-x11-server: Out-of-bounds access in XkbSetMap function (CVE-2020-14360)

* xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability (CVE-2020-14361)

* xorg-x11-server: XRecordRegisterClients integer underflow privilege escalation vulnerability (CVE-2020-14362)

* libX11: Integer overflow leads to double free in locale handling (CVE-2020-14363)

* xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow privilege escalation vulnerability (CVE-2020-25712)

* libX11: Heap overflow in the X input method client (CVE-2020-14344)

* xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of dix/pixmap.c (CVE-2020-14347)

For more…

 https://cve.radiocsirt.org/vuln/bdu:2020-03915 bdu:2020-03915 2026-10-03T17:22:58.831306+00:00 bdu:2020-03915 https://cve.radiocsirt.org/vuln/bell-cve-2020-14347 Withdrawn: BELL-CVE-2020-14347 — CVE-2020-14347 does not affect BellSoft software 2026-10-03T17:22:58.831325+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2021-avi-791 certfr-2021-avi-791 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T17:22:58.831341+00:00 certfr-2021-avi-791 https://cve.radiocsirt.org/vuln/euvd-2026-42380 EUVD-2026-42380 2026-10-03T17:22:58.831356+00:00 EUVD-2026-42380 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14347 fkie_cve-2020-14347 2026-10-03T17:22:58.831367+00:00

A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.

 https://cve.radiocsirt.org/vuln/ghsa-7m6m-38f5-wg3j GHSA-7m6m-38f5-wg3j 2026-10-03T17:22:58.831389+00:00

A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.

 https://cve.radiocsirt.org/vuln/gsd-2020-14347 gsd-2020-14347 2026-10-03T17:22:58.831404+00:00 gsd-2020-14347 https://cve.radiocsirt.org/vuln/oesa-2021-1078 OESA-2021-1078 — xorg-x11-server security update 2026-10-03T17:22:58.831414+00:00

Affected: openEuler:20.03-LTS: xorg-x11-server, openEuler:20.03-LTS-SP1: xorg-x11-server

X.Org X11 X server. Security Fix(es): A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2020-25712) A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.(CVE-2020-14347)

 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1279-1 openSUSE-SU-2020:1279-1 — Security update for xorg-x11-server 2026-10-03T17:22:58.831439+00:00

Security update for xorg-x11-server

 https://cve.radiocsirt.org/vuln/suse-su-2020:14463-1 SUSE-SU-2020:14463-1 — Security update for xorg-x11-server 2026-10-03T17:22:58.831458+00:00

Security update for xorg-x11-server

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14347 UBUNTU-CVE-2020-14347 2026-10-03T17:22:58.831473+00:00

Affected: Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:16.04:LTS: xorg-server, Ubuntu:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:18.04:LTS: xorg-server, Ubuntu:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:20.04:LTS: xorg-server

A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.