https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:01:54.630406+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:10739 ALSA-2026:10739 — Important: tigervnc security update 2026-10-02T14:01:54.687983+00:00

Affected: AlmaLinux:9: tigervnc, AlmaLinux:9: tigervnc-icons, AlmaLinux:9: tigervnc-license, AlmaLinux:9: tigervnc-selinux, AlmaLinux:9: tigervnc-server, AlmaLinux:9: tigervnc-server-minimal, AlmaLinux:9: tigervnc-server-module

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-05830 bdu:2026-05830 2026-10-02T14:01:54.688067+00:00 bdu:2026-05830 https://cve.radiocsirt.org/vuln/bell-cve-2026-34003 BELL-CVE-2026-34003 2026-10-02T14:01:54.688085+00:00

Affected: Alpaquita:stream: xorg-server

 https://cve.radiocsirt.org/vuln/euvd-2026-337321 EUVD-2026-337321 2026-10-02T14:01:54.688103+00:00 EUVD-2026-337321 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34003 fkie_cve-2026-34003 2026-10-02T14:01:54.688114+00:00

A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.

 https://cve.radiocsirt.org/vuln/ghsa-5mqr-3465-c7p6 GHSA-5mqr-3465-c7p6 2026-10-02T14:01:54.688138+00:00

A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-34003 msrc_CVE-2026-34003 — Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access 2026-10-02T14:01:54.688154+00:00 msrc_CVE-2026-34003 https://cve.radiocsirt.org/vuln/oesa-2026-2139 OESA-2026-2139 — xorg-x11-server security update 2026-10-02T14:01:54.688170+00:00

Affected: openEuler:24.03-LTS: xorg-x11-server, openEuler:24.03-LTS-SP1: xorg-x11-server, openEuler:24.03-LTS-SP3: xorg-x11-server, openEuler:20.03-LTS-SP4: xorg-x11-server, openEuler:22.03-LTS-SP4: xorg-x11-server

X.Org X11 X server Security Fix(es):

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.(CVE-2026-33999)

(CVE-2026-34000)

A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.(CVE-2026-34001)

(CVE-2026-34002)

A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.(CVE-2026-34003)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10556-1 openSUSE-SU-2026:10556-1 — xorg-x11-server-21.1.21-5.1 on GA media 2026-10-02T14:01:54.688207+00:00

xorg-x11-server-21.1.21-5.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:20547 RHSA-2026:20547 — Red Hat Security Advisory: xorg-x11-server-Xwayland security update 2026-10-02T14:01:54.688225+00:00

xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing. xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access

 https://cve.radiocsirt.org/vuln/suse-su-2026:1329-1 SUSE-SU-2026:1329-1 — Security update for xwayland 2026-10-02T14:01:54.688251+00:00

Security update for xwayland

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34003 UBUNTU-CVE-2026-34003 2026-10-02T14:01:54.688267+00:00

Affected: Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:Pro:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server, Ubuntu:24.04:LTS: xwayland and 4 more

A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1119 WID-SEC-W-2026-1119 — X.Org X11, Xwayland: Mehrere Schwachstellen 2026-10-02T14:01:54.688309+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 und Xwayland ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, darunter möglicherweise Speicherbeschädigungen, die Offenlegung von Informationen oder einen Denial-of-Service-Zustand.