Search: CVE-2026-50261

CVE-2026-50261 is a use-after-free vulnerability in the X.Org X server and Xwayland components of Red Hat Enterprise Linux 10. It occurs in the SyncChangeCounter() function when multiple SyncCounters are manipulated across client connections, potentially leading to server crashes or privilege escalation if the X server runs as root. The vulnerability has a high severity rating with a CVSS score of 7.8. Red Hat has issued a security advisory addressing this and related vulnerabilities with updated packages for Red Hat Enterprise Linux 8, but no explicit advisory for version 10 was provided in the input.