CVE Feed

    Dashboard / CVE / CVE-2026-88812

    CVE-2026-88812

    A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

    Published:Oct 7, 2026
    Last Modified:Oct 27, 2026
    EPS:Oct 27, 2026
    EPSS Score:
    CVSS Score:7.8

    Affected Products

    Vendor
    X.org
    Product
    Xorg-server
    Vendor
    X.org
    Product
    Xorg-x11-server
    Vendor
    X.org
    Product
    Xwayland

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-93520 (CVSS 7.8) — A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange i…
    CVE-2026-93518 (CVSS 7.8) — An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X…
    CVE-2026-55999 (CVSS 8.5) — Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and …
    CVE-2026-56000 (CVSS 9) — Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and …
    CVE-2026-50264 (CVSS 7.8) — An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFor…
    CVE-2026-50259 (CVSS 7.8) — A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a…
    CVE-2026-50261 (CVSS 7.8) — A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets …
    CVE-2026-50262 (CVSS 5.5) — An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(…
    CVE-2026-50257 (CVSS 7.8) — A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets…
    CVE-2026-50260 (CVSS 7.8) — A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up mul…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High