[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRwVIxjjxwHcVlko2Ax6lEuCxgODvZdN8-1UBUSGWX6s":3,"g5a-ex:x.org\u002Fxwayland@*":221,"g5a-family:x.org\u002Fxwayland":223},{"success":4,"data":5},true,{"product":6,"versions":102,"topVulnerabilitiesByEpss":146,"kevVulnerabilities":198,"seoMetadata":199,"meta":218},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":101},"x.org","xwayland",43,16,0,"2025-02-25",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"21.0.99.901",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"21.0.99.902",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"21.1.0",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"21.1.1",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"21.1.2",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"21.1.3",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"21.1.4",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"22.0.99.901",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"22.0.99.902",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"22.1.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"22.1.1",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"22.1.2",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"22.1.3",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"22.1.4",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"22.1.5",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"22.1.6",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"22.1.7",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"22.1.8",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"22.1.9",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"23.0.99.901",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"23.0.99.902",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"23.1.0",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"23.1.1",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"23.1.2",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"23.1.99.901",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"23.1.99.902",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"23.2.0",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"23.2.1",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"23.2.2",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"23.2.3",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"23.2.4",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"23.2.5",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"23.2.6",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"23.2.7",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"24.0.99.901",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"24.0.99.902",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.0",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.1",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.2",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.3",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.4",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.5",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.6","Xwayland by X.org is a technology product with 43 tracked versions and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},[147,155,162,167,172,179,183,187,191,194],{"cveId":148,"description":149,"publishedDate":150,"cvssScore":151,"cvssVersion":152,"severity":153,"isKev":16,"epssScore":154},"CVE-2023-6816","A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.","2024-01-18",9.8,"v3.1","Critical",0.02106,{"cveId":156,"description":157,"publishedDate":158,"cvssScore":159,"cvssVersion":152,"severity":160,"isKev":16,"epssScore":161},"CVE-2023-6478","A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.","2023-12-13",7.6,"High",0.01617,{"cveId":163,"description":164,"publishedDate":158,"cvssScore":165,"cvssVersion":152,"severity":160,"isKev":16,"epssScore":166},"CVE-2023-6377","A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.",7.8,0.01574,{"cveId":168,"description":169,"publishedDate":170,"cvssScore":165,"cvssVersion":152,"severity":160,"isKev":16,"epssScore":171},"CVE-2024-0229","An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.","2024-02-09",0.01229,{"cveId":173,"description":174,"publishedDate":175,"cvssScore":176,"cvssVersion":152,"severity":177,"isKev":16,"epssScore":178},"CVE-2023-5380","A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.","2023-10-25",4.7,"Medium",0.00715,{"cveId":180,"description":181,"publishedDate":175,"cvssScore":165,"cvssVersion":152,"severity":160,"isKev":16,"epssScore":182},"CVE-2023-5367","A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi\u002Fxiproperty.c and in RRChangeOutputProperty function in randr\u002Frrproperty.c, allowing for possible escalation of privileges or denial of service.",0.0062,{"cveId":184,"description":185,"publishedDate":12,"cvssScore":165,"cvssVersion":152,"severity":160,"isKev":16,"epssScore":186},"CVE-2025-26597","A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size.",0.00444,{"cveId":188,"description":189,"publishedDate":12,"cvssScore":165,"cvssVersion":152,"severity":160,"isKev":16,"epssScore":190},"CVE-2025-26595","A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.",0.00438,{"cveId":192,"description":193,"publishedDate":12,"cvssScore":165,"cvssVersion":152,"severity":160,"isKev":16,"epssScore":190},"CVE-2025-26596","A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.",{"cveId":195,"description":196,"publishedDate":12,"cvssScore":165,"cvssVersion":152,"severity":160,"isKev":16,"epssScore":197},"CVE-2025-26599","An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.",0.00405,[],{"title":200,"metaDescription":201,"keywords":202,"structuredData":203},"Xwayland by X.org - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Xwayland by X.org covering 43 versions with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Xwayland vulnerabilities, Xwayland security, Xwayland CVE, X.org Xwayland, Xwayland threat intelligence, X.org security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":204,"@type":205,"name":206,"description":201,"url":207,"manufacturer":208,"applicationCategory":212,"softwareVersion":213,"mainEntity":214},"https:\u002F\u002Fschema.org","SoftwareApplication","Xwayland","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fx.org\u002Fxwayland",{"@type":209,"name":210,"url":211},"Organization","X.org","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fx.org","Security Software","43 versions tracked",{"@type":215,"name":216,"description":217,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Xwayland Security Vulnerabilities","Security vulnerabilities affecting Xwayland by X.org",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":219,"apiVersion":220},"2026-10-17T19:26:52.380Z","3.0",{"rows":222,"total":11,"capped":16,"failed":11},[],[]]