https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:41:08.726426+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:9303 ALSA-2025:9303 — Important: xorg-x11-server and xorg-x11-server-Xwayland security update 2026-10-02T19:41:09.451085+00:00

Affected: AlmaLinux:9: xorg-x11-server-Xdmx, AlmaLinux:9: xorg-x11-server-Xephyr, AlmaLinux:9: xorg-x11-server-Xnest, AlmaLinux:9: xorg-x11-server-Xorg, AlmaLinux:9: xorg-x11-server-Xvfb, AlmaLinux:9: xorg-x11-server-Xwayland, AlmaLinux:9: xorg-x11-server-Xwayland-devel, AlmaLinux:9: xorg-x11-server-common, AlmaLinux:9: xorg-x11-server-devel, AlmaLinux:9: xorg-x11-server-source

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-12255 bdu:2025-12255 2026-10-02T19:41:09.451183+00:00 bdu:2025-12255 https://cve.radiocsirt.org/vuln/bell-cve-2025-49178 BELL-CVE-2025-49178 2026-10-02T19:41:09.451202+00:00

Affected: Alpaquita:23: xorg-server, Alpaquita:25: xorg-server, Alpaquita:stream: xorg-server

 https://cve.radiocsirt.org/vuln/euvd-2026-331309 EUVD-2026-331309 2026-10-02T19:41:09.451245+00:00 EUVD-2026-331309 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49178 fkie_cve-2025-49178 2026-10-02T19:41:09.451258+00:00

A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-69rm-w9qj-3x45 GHSA-69rm-w9qj-3x45 2026-10-02T19:41:09.451281+00:00

A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-49178 msrc_CVE-2025-49178 — Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore 2026-10-02T19:41:09.451297+00:00 msrc_CVE-2025-49178 https://cve.radiocsirt.org/vuln/oesa-2026-1380 OESA-2026-1380 — xorg-x11-server security update 2026-10-02T19:41:09.451314+00:00

Affected: openEuler:24.03-LTS-SP2: xorg-x11-server, openEuler:24.03-LTS-SP3: xorg-x11-server, openEuler:20.03-LTS-SP4: xorg-x11-server, openEuler:22.03-LTS-SP4: xorg-x11-server, openEuler:24.03-LTS: xorg-x11-server, openEuler:24.03-LTS-SP1: xorg-x11-server

X.Org X11 X server Security Fix(es):

In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock.(CVE-2022-49737)

A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.(CVE-2025-49175)

A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.(CVE-2025-49176)

A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.(CVE-2025-49178)

A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.(CVE-2025-49179)

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.(CVE-2…

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15310-1 openSUSE-SU-2025:15310-1 — xorg-x11-server-21.1.15-6.1 on GA media 2026-10-02T19:41:09.451371+00:00

xorg-x11-server-21.1.15-6.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:10258 RHSA-2025:10258 — Red Hat Security Advisory: xorg-x11-server-Xwayland security update 2026-10-02T19:41:09.451393+00:00

xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Data Leak in XFIXES Extension's XFixesSetClientDisconnectMode xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension

 https://cve.radiocsirt.org/vuln/suse-su-2025:01974-1 SUSE-SU-2025:01974-1 — Security update for xwayland 2026-10-02T19:41:09.451421+00:00

Security update for xwayland

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-49178 UBUNTU-CVE-2025-49178 2026-10-02T19:41:09.451439+00:00

Affected: Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:Pro:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server, Ubuntu:24.04:LTS: xwayland and 4 more

A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1352 WID-SEC-W-2025-1352 — X.Org X11 und Xwayland: Mehrere Schwachstellen 2026-10-02T19:41:09.451478+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 und Xwayland ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen und möglicherweise Code auszuführen oder nicht näher spezifizierte Auswirkungen zu erzielen.