CVE-2026-34002Medium· 6.1▾ SunlitA flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, w…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.
xorg-x11-server-Xwayland (all versions)tigervnc (all versions)xorg-x11-server (all versions)tigervnc (all versions)xorg-x11-server (all versions)tigervnc (all versions)xorg-x11-server (all versions)tigervnc (all versions)xorg-x11-server-Xwayland (all versions)xorg-x11-server (all versions)tigervnc (all versions)tigervnc (all versions)xorg-x11-server-Xwayland (all versions)xorg-x11-server (all versions)xorg-x11-server-Xwayland (all versions)xorg-x11-server (all versions)xorg-x11-server-Xwayland (all versions)xorg-x11-server (all versions)tigervnc (all versions)xorg-x11-server-Xwayland (all versions)xorg-x11-server (all versions)tigervnc (all versions)xorg-x11-server-Xwayland (all versions)xorg-x11-server (all versions)tigervnc (all versions)xorg-x11-server-Xwayland (all versions)xorg-x11-server (all versions)tigervnc (all versions)xorg-x11-server (all versions)xorg-x11-server-Xwayland (all versions)tigervnc (all versions)xorg-x11-server (all versions)xorg-x11-server-Xwayland (all versions)tigervnc (all versions)xorg-x11-server-Xwayland (all versions)xorg-x11-servertigervnc (all versions)xorg-x11-server (all versions)xorg-x11-server-Xwayland (all versions)tigervnc (all versions)xorg-x11-server (all versions)xorg-x11-server-Xwayland (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
To mitigate this vulnerability, restrict access to the X11 server. If the X.Org X server is not required on a system, consider disabling or uninstalling it. For systems where the X server is necessary, ensure that access is limited to trusted users and networks. This can involve configuring xhost or implementing firewall rules to restrict connections to the X server. Any changes to X server configuration or service status may require a restart of the X server for the mitigation to take effect, which will impact active graphical sessions.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-34000Medium· 6.1Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.
CVE-2026-33999High· 7.8Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling
CVE-2026-34001High· 7.8Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption
CVE-2026-34003High· 7.8Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access
CVE-2026-6695Medium· 5.5Gimp: gimp: remote code execution via crafted paa file
CVE-2026-12549Medium· 4.8Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver