https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:45:42 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:2500 <p><strong>Affected:</strong> AlmaLinux:9: tigervnc, AlmaLinux:9: tigervnc-icons, AlmaLinux:9: tigervnc-license, AlmaLinux:9: tigervnc-selinux, AlmaLinux:9: tigervnc-server, AlmaLinux:9: tigervnc-server-minimal, AlmaLinux:9: tigervnc-server-module</p> <p>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.</p> <p>Security Fix(es):</p> <p>* X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594) * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601) * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600) * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599) * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598) * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597) * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596) * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: tigervnc, AlmaLinux:9: tigervnc-icons, AlmaLinux:9: tigervnc-license, AlmaLinux:9: tigervnc-selinux, AlmaLinux:9: tigervnc-server, AlmaLinux:9: tigervnc-server-minimal, AlmaLinux:9: tigervnc-server-module</p> <p>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.</p> <p>Security Fix(es):</p> <p>* X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594) * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601) * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600) * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599) * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598) * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597) * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596) * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:2500 https://cve.radiocsirt.org/vuln/bdu:2025-04127 bdu:2025-04127 https://cve.radiocsirt.org/vuln/bdu:2025-04127 https://cve.radiocsirt.org/vuln/bell-cve-2025-26595 <p><strong>Affected:</strong> Alpaquita:23: xorg-server, Alpaquita:stream: xorg-server</p> <p><strong>Affected:</strong> Alpaquita:23: xorg-server, Alpaquita:stream: xorg-server</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-26595 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/euvd-2026-331184 EUVD-2026-331184 https://cve.radiocsirt.org/vuln/euvd-2026-331184 https://cve.radiocsirt.org/vuln/fkie_cve-2025-26595 <p>A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.</p> <p>A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-26595 https://cve.radiocsirt.org/vuln/ghsa-hp9r-wcfh-72pr <p>A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.</p> <p>A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.</p> https://cve.radiocsirt.org/vuln/ghsa-hp9r-wcfh-72pr https://cve.radiocsirt.org/vuln/msrc_cve-2025-26595 msrc_CVE-2025-26595 https://cve.radiocsirt.org/vuln/msrc_cve-2025-26595 https://cve.radiocsirt.org/vuln/oesa-2025-1256 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: libxkbfile, openEuler:22.03-LTS-SP4: libxkbfile, openEuler:24.03-LTS: libxkbfile, openEuler:24.03-LTS-SP1: libxkbfile, openEuler:20.03-LTS-SP4: libxkbfile</p> <p>Libxkbfile is used by the X servers and utilities to parse the XKB configuration data files. Security Fix(es):</p> <p>A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.(CVE-2025-26595)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: libxkbfile, openEuler:22.03-LTS-SP4: libxkbfile, openEuler:24.03-LTS: libxkbfile, openEuler:24.03-LTS-SP1: libxkbfile, openEuler:20.03-LTS-SP4: libxkbfile</p> <p>Libxkbfile is used by the X servers and utilities to parse the XKB configuration data files. Security Fix(es):</p> <p>A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.(CVE-2025-26595)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1256 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14838-1 <p>libxkbfile-devel-1.1.3-2.1 on GA media</p> <p>libxkbfile-devel-1.1.3-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14838-1 https://cve.radiocsirt.org/vuln/rhsa-2025:2862 <p>X.Org: Xwayland: Use-after-free of the root cursor Xorg: xwayland: Buffer overflow in XkbVModMaskText() xorg: xwayland: Heap overflow in XkbWriteKeySyms() xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() xorg: xwayland: Use-after-free in PlayReleasedEvents() xorg: xwayland: Use-after-free in SyncInitTrigger()</p> <p>X.Org: Xwayland: Use-after-free of the root cursor Xorg: xwayland: Buffer overflow in XkbVModMaskText() xorg: xwayland: Heap overflow in XkbWriteKeySyms() xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() xorg: xwayland: Use-after-free in PlayReleasedEvents() xorg: xwayland: Use-after-free in SyncInitTrigger()</p> https://cve.radiocsirt.org/vuln/rhsa-2025:2862 https://cve.radiocsirt.org/vuln/suse-su-2025:0729-1 <p>Security update for xwayland</p> <p>Security update for xwayland</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0729-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-26595 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server, Ubuntu:24.04:LTS: xwayland and 1 more</p> <p>A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server, Ubuntu:24.04:LTS: xwayland and 1 more</p> <p>A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-26595 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0435 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 ausnutzen, um nicht spezifizierte Effekte zu verursachen, was möglicherweise zur Ausführung von beliebigem Code führt.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 ausnutzen, um nicht spezifizierte Effekte zu verursachen, was möglicherweise zur Ausführung von beliebigem Code führt.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0435