https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 14:19:57 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:38486 <p><strong>Affected:</strong> AlmaLinux:9: xorg-x11-server-Xdmx, AlmaLinux:9: xorg-x11-server-Xephyr, AlmaLinux:9: xorg-x11-server-Xnest, AlmaLinux:9: xorg-x11-server-Xorg, AlmaLinux:9: xorg-x11-server-Xvfb, AlmaLinux:9: xorg-x11-server-common, AlmaLinux:9: xorg-x11-server-devel, AlmaLinux:9: xorg-x11-server-source</p> <p>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.</p> <p>Security Fix(es):</p> <p>* xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: xorg-x11-server-Xdmx, AlmaLinux:9: xorg-x11-server-Xephyr, AlmaLinux:9: xorg-x11-server-Xnest, AlmaLinux:9: xorg-x11-server-Xorg, AlmaLinux:9: xorg-x11-server-Xvfb, AlmaLinux:9: xorg-x11-server-common, AlmaLinux:9: xorg-x11-server-devel, AlmaLinux:9: xorg-x11-server-source</p> <p>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.</p> <p>Security Fix(es):</p> <p>* xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:38486 https://cve.radiocsirt.org/vuln/bell-cve-2026-55999 <p><strong>Affected:</strong> Alpaquita:23: xorg-server, Alpaquita:25: xorg-server, Alpaquita:stream: xorg-server</p> <p><strong>Affected:</strong> Alpaquita:23: xorg-server, Alpaquita:25: xorg-server, Alpaquita:stream: xorg-server</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-55999 https://cve.radiocsirt.org/vuln/euvd-2026-335156 EUVD-2026-335156 https://cve.radiocsirt.org/vuln/euvd-2026-335156 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55999 <p>Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.</p> <p>Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-55999 https://cve.radiocsirt.org/vuln/ghsa-h655-847g-q4f7 <p>Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.</p> <p>Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.</p> https://cve.radiocsirt.org/vuln/ghsa-h655-847g-q4f7 https://cve.radiocsirt.org/vuln/msrc_cve-2026-55999 msrc_CVE-2026-55999 https://cve.radiocsirt.org/vuln/msrc_cve-2026-55999 https://cve.radiocsirt.org/vuln/oesa-2026-3026 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: xorg-x11-server, openEuler:24.03-LTS-SP1: xorg-x11-server, openEuler:24.03-LTS-SP3: xorg-x11-server, openEuler:24.03-LTS-SP4: xorg-x11-server, openEuler:20.03-LTS-SP4: xorg-x11-server</p> <p>X.Org X11 X server Security Fix(es):</p> <p>Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.(CVE-2026-55999)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: xorg-x11-server, openEuler:24.03-LTS-SP1: xorg-x11-server, openEuler:24.03-LTS-SP3: xorg-x11-server, openEuler:24.03-LTS-SP4: xorg-x11-server, openEuler:20.03-LTS-SP4: xorg-x11-server</p> <p>X.Org X11 X server Security Fix(es):</p> <p>Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.(CVE-2026-55999)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3026 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11227-1 <p>xwayland-24.1.12-1.1 on GA media</p> <p>xwayland-24.1.12-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11227-1 https://cve.radiocsirt.org/vuln/rhsa-2026:49515 <p>xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow</p> <p>xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow</p> https://cve.radiocsirt.org/vuln/rhsa-2026:49515 https://cve.radiocsirt.org/vuln/rlsa-2026:38486 <p><strong>Affected:</strong> Rocky Linux:9: xorg-x11-server</p> <p>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.</p> <p>Security Fix(es):</p> <p>* xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:9: xorg-x11-server</p> <p>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.</p> <p>Security Fix(es):</p> <p>* xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:38486 https://cve.radiocsirt.org/vuln/suse-su-2026:22617-1 <p>Security update for xwayland</p> <p>Security update for xwayland</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22617-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-55999 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:Pro:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server, Ubuntu:24.04:LTS: xwayland and 4 more</p> <p>Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:Pro:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server, Ubuntu:24.04:LTS: xwayland and 4 more</p> <p>Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-55999 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2240 <p>Ein Angreifer kann mehrere Schwachstellen in X.Org X11 und Xwayland ausnutzen, um einen Denial of Service zu verursachen oder potentiell beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in X.Org X11 und Xwayland ausnutzen, um einen Denial of Service zu verursachen oder potentiell beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2240