CVE Feed

    Dashboard / CVE / CVE-2026-93519

    CVE-2026-93519

    A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

    Published:Oct 7, 2026
    Last Modified:Oct 28, 2026
    EPS:Oct 28, 2026
    EPSS Score:
    CVSS Score:7.8

    Affected Products

    Vendor
    X.org
    Product
    Xorg-x11-server
    Vendor
    X.orgg
    Product
    Xwayland

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-93515 (CVSS 6.8) — A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before…
    CVE-2026-93520 (CVSS 7.8) — A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange i…
    CVE-2026-93523 (CVSS 7.8) — A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org …
    CVE-2026-93522 (CVSS 7.8) — A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21…
    CVE-2026-93516 (CVSS 5.5) — A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org …
    CVE-2026-88812 (CVSS 7.8) — A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by…
    CVE-2026-93518 (CVSS 7.8) — An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X…
    CVE-2026-93521 (CVSS 7.8) — A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before…
    CVE-2026-93524 (CVSS 6.9) — A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used…
    CVE-2026-93536 (CVSS 5.3) — A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High