Threats affecting pkg:github/freedesktop/xorg/xserver

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8		CVE-2026-88812XKB SetGeometryin X.Org X Server · Double Free High7.82026-10-27GCVE DatabaseCVE-2026-88812 CVE-2026-88812 is a high-severity vulnerability involving a double free flaw in the XKB SetGeometry function of X.Org X Server versions before 21.1.25 and X Wayland versions before 24.1.14. This flaw could allow attached clients with limited privileges to cause a crash or potentially execute code within the X server context. Report on CVE-2026-88812 Vulnerability CWE-415 #ghsa-prmg-8fm6-8p8h	GCVE Database	2026-10-27
Critical	9.0	EPSS 0.3%	CVE-2026-56000X.Org xwayland · Use After Free Critical9.0EPSS 0.3%2026-07-08CVE Database V5CVE-2026-56000 Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-07-08

Page 1 of 1