# X.org vulnerabilities

> X.org has 153 published vulnerabilities across 31 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is X Server, with 82. If you run X.org software, patch the exploited flaws first.

Canonical page: https://www.precursorintelligence.com/vendors/x.org

## At a glance

- **Published vulnerabilities:** 153
- **Known to be exploited:** 0
- **Products:** 31
- **Versions:** 717

## Which X.org products have the most vulnerabilities?

- [X Server](https://www.precursorintelligence.com/product/x.org/x_server): 82 published vulnerabilities, 280 versions
- [Xorg-Server](https://www.precursorintelligence.com/product/x.org/xorg-server): 47 published vulnerabilities, 190 versions
- [X11](https://www.precursorintelligence.com/product/x.org/x11): 19 published vulnerabilities, 20 versions
- [Xwayland](https://www.precursorintelligence.com/product/x.org/xwayland): 16 published vulnerabilities, 43 versions
- [Libx11](https://www.precursorintelligence.com/product/x.org/libx11): 15 published vulnerabilities, 66 versions
- [X11r6](https://www.precursorintelligence.com/product/x.org/x11r6): 8 published vulnerabilities, 5 versions
- [X.org](https://www.precursorintelligence.com/product/x.org/x.org): 7 published vulnerabilities, 5 versions
- [Xserver](https://www.precursorintelligence.com/product/x.org/xserver): 6 published vulnerabilities, 0 versions
- [Libxpm](https://www.precursorintelligence.com/product/x.org/libxpm): 5 published vulnerabilities, 13 versions
- [Libxi](https://www.precursorintelligence.com/product/x.org/libxi): 5 published vulnerabilities, 18 versions

Each product page lists its own known-exploited flaws.

## Which X.org vulnerabilities are being exploited?

None of X.org's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

## Which X.org flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2018-14665](https://www.precursorintelligence.com/what-is/cve-2018-14665): 27%, Medium (CVSS 6.6)
- [CVE-1999-0526](https://www.precursorintelligence.com/what-is/cve-1999-0526): 21%, Critical (CVSS 10.0)
- [CVE-2007-4990](https://www.precursorintelligence.com/what-is/cve-2007-4990): 11%, High (CVSS 7.5)
- [CVE-2021-31535](https://www.precursorintelligence.com/what-is/cve-2021-31535): 11%, Critical (CVSS 9.8)
- [CVE-2018-14600](https://www.precursorintelligence.com/what-is/cve-2018-14600): 9.3%, Critical (CVSS 9.8)
- [CVE-2016-10164](https://www.precursorintelligence.com/what-is/cve-2016-10164): 7.6%, Critical (CVSS 9.8)
- [CVE-2007-1351](https://www.precursorintelligence.com/what-is/cve-2007-1351): 5.6%, High (CVSS 8.5)

## All X.org products we track

26 products with at least one tracked version, most vulnerabilities first:

- [X Server](https://www.precursorintelligence.com/product/x.org/x_server): 82 vulnerabilities, 280 versions
- [Xorg-Server](https://www.precursorintelligence.com/product/x.org/xorg-server): 47 vulnerabilities, 190 versions
- [X11](https://www.precursorintelligence.com/product/x.org/x11): 19 vulnerabilities, 20 versions
- [Xwayland](https://www.precursorintelligence.com/product/x.org/xwayland): 16 vulnerabilities, 43 versions
- [Libx11](https://www.precursorintelligence.com/product/x.org/libx11): 15 vulnerabilities, 66 versions
- [X11r6](https://www.precursorintelligence.com/product/x.org/x11r6): 8 vulnerabilities, 5 versions
- [X.org](https://www.precursorintelligence.com/product/x.org/x.org): 7 vulnerabilities, 5 versions
- [Libxpm](https://www.precursorintelligence.com/product/x.org/libxpm): 5 vulnerabilities, 13 versions
- [Libxi](https://www.precursorintelligence.com/product/x.org/libxi): 5 vulnerabilities, 18 versions
- [Xfree86](https://www.precursorintelligence.com/product/x.org/xfree86): 5 vulnerabilities, 3 versions
- [Libxfont](https://www.precursorintelligence.com/product/x.org/libxfont): 4 vulnerabilities, 3 versions
- [X Window System](https://www.precursorintelligence.com/product/x.org/x_window_system): 2 vulnerabilities, 11 versions
- [Libxrandr](https://www.precursorintelligence.com/product/x.org/libxrandr): 2 vulnerabilities, 3 versions
- [Libxrender](https://www.precursorintelligence.com/product/x.org/libxrender): 2 vulnerabilities, 10 versions
- [Libxv](https://www.precursorintelligence.com/product/x.org/libxv): 2 vulnerabilities, 10 versions
- [X11r7](https://www.precursorintelligence.com/product/x.org/x11r7): 2 vulnerabilities, 3 versions
- [Xdm](https://www.precursorintelligence.com/product/x.org/xdm): 2 vulnerabilities, 1 version
- [X Font Server](https://www.precursorintelligence.com/product/x.org/x_font_server): 2 vulnerabilities, 3 versions
- [Xf86dga](https://www.precursorintelligence.com/product/x.org/xf86dga): 1 vulnerability, 1 version
- [Emu-Linux-X87-Xlibs](https://www.precursorintelligence.com/product/x.org/emu-linux-x87-xlibs): 1 vulnerability, 1 version
- [Xinit](https://www.precursorintelligence.com/product/x.org/xinit): 1 vulnerability, 1 version
- [Xload](https://www.precursorintelligence.com/product/x.org/xload): 1 vulnerability, 1 version
- [Libxvmc](https://www.precursorintelligence.com/product/x.org/libxvmc): 1 vulnerability, 10 versions
- [Libxfixes](https://www.precursorintelligence.com/product/x.org/libxfixes): 1 vulnerability, 11 versions
- [Libxdmcp](https://www.precursorintelligence.com/product/x.org/libxdmcp): 1 vulnerability, 4 versions
- [Xterm](https://www.precursorintelligence.com/product/x.org/xterm): 1 vulnerability, 1 version

## Questions

### How many vulnerabilities does X.org have?

Our catalogue lists 153 published vulnerabilities across 31 products and 717 versions from X.org.

### Which X.org vulnerabilities are being exploited?

None of X.org's vulnerabilities is on the list of flaws known to be exploited today.

### Which X.org product has the most vulnerabilities?

X Server, with 82 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new X.org vulnerabilities?

Create a Precursor Intelligence account and track the X.org products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running X.org?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact

