xorg-server
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-9632 | 1.1.1 – < 21.1.14 | Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | HIGH 7.8 | 0.9 % | ||
| CVE-2024-31082 | 1.12.0 – < 21.1.12 | Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap | HIGH 7.3 | 0.3 % | ||
| CVE-2024-31081 | 1.7.0 | Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice | HIGH 7.3 | 0.5 % | ||
| CVE-2024-31080 | ≥ 29.1.0 | Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents | HIGH 7.3 | 0.5 % | ||
| CVE-2024-21886 | 1.21.1.7 | Xorg-x11-server: heap buffer overflow in disabledevice | HIGH 7.8 | 1.4 % | ||
| CVE-2024-21885 | < 21.1.11 | Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent | HIGH 7.8 | 1.4 % | ||
| CVE-2024-0229 | 21.1.0 – < 21.1.11 | Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access | HIGH 7.8 | 1.2 % | ||
| CVE-2024-0409 | 21.1.0 – < 21.1.11 | Xorg-x11-server: selinux context corruption | HIGH 7.8 | 0.4 % | ||
| CVE-2024-0408 | 21.1.0 – < 21.1.11 | Xorg-x11-server: selinux unlabeled glx pbuffer | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-1393 | xorg-server 21.1.8 | A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys th | HIGH 7.8 | 0.4 % |