https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:01:10.639500+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2169 ALSA-2024:2169 — Moderate: xorg-x11-server security update 2026-10-02T22:01:10.657297+00:00

Affected: AlmaLinux:9: xorg-x11-server-Xdmx, AlmaLinux:9: xorg-x11-server-Xephyr, AlmaLinux:9: xorg-x11-server-Xnest, AlmaLinux:9: xorg-x11-server-Xorg, AlmaLinux:9: xorg-x11-server-Xvfb, AlmaLinux:9: xorg-x11-server-common, AlmaLinux:9: xorg-x11-server-devel, AlmaLinux:9: xorg-x11-server-source

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) * xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377) * xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478) * xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816) * xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229) * xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408) * xorg-x11-server: SELinux context corruption (CVE-2024-0409) * xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885) * xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886) * xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-07412 bdu:2023-07412 2026-10-02T22:01:10.657375+00:00 bdu:2023-07412 https://cve.radiocsirt.org/vuln/bell-cve-2023-5380 BELL-CVE-2023-5380 2026-10-02T22:01:10.657393+00:00

Affected: Alpaquita:23: xorg-server, Alpaquita:stream: xorg-server

 https://cve.radiocsirt.org/vuln/euvd-2026-329616 EUVD-2026-329616 2026-10-02T22:01:10.657413+00:00 EUVD-2026-329616 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5380 fkie_cve-2023-5380 2026-10-02T22:01:10.657424+00:00

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.

 https://cve.radiocsirt.org/vuln/ghsa-294c-hpxh-5qrx GHSA-294c-hpxh-5qrx 2026-10-02T22:01:10.657454+00:00

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.

 https://cve.radiocsirt.org/vuln/gsd-2023-5380 gsd-2023-5380 2026-10-02T22:01:10.657469+00:00 gsd-2023-5380 https://cve.radiocsirt.org/vuln/msrc_cve-2023-5380 msrc_CVE-2023-5380 — Xorg-x11-server: use-after-free bug in destroywindow 2026-10-02T22:01:10.657479+00:00 msrc_CVE-2023-5380 https://cve.radiocsirt.org/vuln/oesa-2023-1795 OESA-2023-1795 — xorg-x11-server security update 2026-10-02T22:01:10.657493+00:00

Affected: openEuler:20.03-LTS-SP1: xorg-x11-server, openEuler:20.03-LTS-SP3: xorg-x11-server, openEuler:22.03-LTS: xorg-x11-server, openEuler:22.03-LTS-SP1: xorg-x11-server, openEuler:22.03-LTS-SP2: xorg-x11-server

X.Org X11 X server Security Fix(es): A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.(CVE-2023-5367) A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.(CVE-2023-5380)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13362-1 openSUSE-SU-2024:13362-1 — xwayland-23.2.2-1.1 on GA media 2026-10-02T22:01:10.657522+00:00

xwayland-23.2.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2023:4269-1 SUSE-SU-2023:4269-1 — Security update for xorg-x11-server 2026-10-02T22:01:10.657538+00:00

Security update for xorg-x11-server

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-5380 UBUNTU-CVE-2023-5380 2026-10-02T22:01:10.657552+00:00

Affected: Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:24.04:LTS: xorg-server

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2735 WID-SEC-W-2023-2735 — Xming: Schwachstelle ermöglicht nicht spezifizierten Angriff 2026-10-02T22:01:10.657580+00:00

Ein Angreifer kann eine Schwachstelle in Xming ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.