https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T17:46:03.786235+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/alsa-2026:85191 ALSA-2026:85191 — Important: xorg-x11-server-Xwayland security update 2026-10-29T17:46:03.873575+00:00

Affected: AlmaLinux:10: xorg-x11-server-Xwayland, AlmaLinux:10: xorg-x11-server-Xwayland-devel

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516) * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521) * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812) * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523) * xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522) * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517) * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518) * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519) * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://db.gcve.eu/vuln/ghsa-5h3m-pr22-58xf GHSA-5h3m-pr22-58xf 2026-10-29T17:46:03.873927+00:00

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

 https://db.gcve.eu/vuln/opensuse-su-2026:12105-1 openSUSE-SU-2026:12105-1 — xwayland-24.1.13-2.1 on GA media 2026-10-29T17:46:03.874028+00:00

xwayland-24.1.13-2.1 on GA media

 https://db.gcve.eu/vuln/suse-su-2026:24230-1 SUSE-SU-2026:24230-1 — Security update for xwayland 2026-10-29T17:46:03.874126+00:00

Security update for xwayland

 https://db.gcve.eu/vuln/ubuntu-cve-2026-93522 UBUNTU-CVE-2026-93522 2026-10-29T17:46:03.874221+00:00

Affected: Ubuntu:Pro:14.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server, Ubuntu:Pro:16.04:LTS: xorg-server-hwe-16.04, Ubuntu:Pro:18.04:LTS: xorg-server, Ubuntu:Pro:18.04:LTS: xorg-server-hwe-18.04, Ubuntu:Pro:20.04:LTS: xorg-server, Ubuntu:22.04:LTS: xorg-server, Ubuntu:22.04:LTS: xwayland, Ubuntu:24.04:LTS: xorg-server, Ubuntu:24.04:LTS: xwayland and 4 more

[Glamor CopyArea CPU-FBO Heap Buffer Overflow]