https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:45:54.762107+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:0010 ALSA-2024:0010 — Important: tigervnc security update 2026-10-03T18:45:54.988326+00:00

Affected: AlmaLinux:9: tigervnc, AlmaLinux:9: tigervnc-icons, AlmaLinux:9: tigervnc-license, AlmaLinux:9: tigervnc-selinux, AlmaLinux:9: tigervnc-server, AlmaLinux:9: tigervnc-server-minimal, AlmaLinux:9: tigervnc-server-module

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) * xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377) * xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-00457 bdu:2024-00457 2026-10-03T18:45:54.988408+00:00 bdu:2024-00457 https://cve.radiocsirt.org/vuln/bell-cve-2023-6377 BELL-CVE-2023-6377 2026-10-03T18:45:54.988426+00:00

Affected: Alpaquita:23: xorg-server, Alpaquita:stream: xorg-server

 https://cve.radiocsirt.org/vuln/euvd-2026-329618 EUVD-2026-329618 2026-10-03T18:45:54.988445+00:00 EUVD-2026-329618 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6377 fkie_cve-2023-6377 2026-10-03T18:45:54.988457+00:00

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.

 https://cve.radiocsirt.org/vuln/ghsa-xp6x-8hgv-x5w5 GHSA-xp6x-8hgv-x5w5 2026-10-03T18:45:54.988479+00:00

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.

 https://cve.radiocsirt.org/vuln/gsd-2023-6377 gsd-2023-6377 2026-10-03T18:45:54.988493+00:00 gsd-2023-6377 https://cve.radiocsirt.org/vuln/msrc_cve-2023-6377 msrc_CVE-2023-6377 — Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions 2026-10-03T18:45:54.988504+00:00 msrc_CVE-2023-6377 https://cve.radiocsirt.org/vuln/oesa-2023-1951 OESA-2023-1951 — xorg-x11-server security update 2026-10-03T18:45:54.988519+00:00

Affected: openEuler:20.03-LTS-SP1: xorg-x11-server, openEuler:20.03-LTS-SP3: xorg-x11-server, openEuler:20.03-LTS-SP4: xorg-x11-server, openEuler:22.03-LTS: xorg-x11-server, openEuler:22.03-LTS-SP1: xorg-x11-server, openEuler:22.03-LTS-SP2: xorg-x11-server

X.Org X11 X server Security Fix(es): A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.(CVE-2023-6377) A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.(CVE-2023-6478)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13512-1 openSUSE-SU-2024:13512-1 — xorg-x11-server-21.1.9-2.1 on GA media 2026-10-03T18:45:54.988549+00:00

xorg-x11-server-21.1.9-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:7886 RHSA-2023:7886 — Red Hat Security Advisory: tigervnc security update 2026-10-03T18:45:54.988565+00:00

xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty

 https://cve.radiocsirt.org/vuln/suse-su-2023:4787-1 SUSE-SU-2023:4787-1 — Security update for xorg-x11-server 2026-10-03T18:45:54.988583+00:00

Security update for xorg-x11-server

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6377 UBUNTU-CVE-2023-6377 2026-10-03T18:45:54.988597+00:00

Affected: Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3131 WID-SEC-W-2023-3131 — X.Org X11: Mehrere Schwachstellen 2026-10-03T18:45:54.988625+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 und Xming ausnutzen, um seine Privilegien zu erhöhen oder Informationen offenzulegen.