[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbdEIc9vY8gdksC6rygSJHsGlsdXSRlWIJHGVMXJOr2c":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":144,"kevVulnerabilities":203,"topProductsByCves":204,"seoMetadata":215,"meta":224},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":143},36134,"x.org",31,153,0,717,"2025-02-25","x",[16,21,27,33,38,44,50,54,59,63,68,73,78,84,87,91,94,97,102,106,109,112,115,118,121,124,127,130,134,137,140],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},174335,"x_server",280,82,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},174334,"xorg-server",190,47,"2024-01-18",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},174324,"x11",20,19,"2015-04-16",{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":11,"last_cve_update":13},174338,"xwayland",43,16,{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":11,"last_cve_update":43},174311,"libx11",66,15,"2023-10-10",{"id":45,"product_name":46,"version_count":47,"cve_count":48,"kev_count":11,"last_cve_update":49},174325,"x11r6",5,8,"2006-08-30",{"id":51,"product_name":8,"version_count":47,"cve_count":52,"kev_count":11,"last_cve_update":53},174333,7,"2012-09-05",{"id":55,"product_name":56,"version_count":11,"cve_count":57,"kev_count":11,"last_cve_update":58},174336,"xserver",6,"2008-01-18",{"id":60,"product_name":61,"version_count":62,"cve_count":47,"kev_count":11,"last_cve_update":43},174316,"libxpm",13,{"id":64,"product_name":65,"version_count":66,"cve_count":47,"kev_count":11,"last_cve_update":67},174315,"libxi",18,"2016-12-13",{"id":69,"product_name":70,"version_count":71,"cve_count":47,"kev_count":11,"last_cve_update":72},174330,"xfree86",3,"2014-12-10",{"id":74,"product_name":75,"version_count":71,"cve_count":76,"kev_count":11,"last_cve_update":77},174314,"libxfont",4,"2017-10-11",{"id":79,"product_name":80,"version_count":81,"cve_count":82,"kev_count":11,"last_cve_update":83},174339,"x_window_system",11,2,"2021-05-27",{"id":85,"product_name":86,"version_count":71,"cve_count":82,"kev_count":11,"last_cve_update":67},174317,"libxrandr",{"id":88,"product_name":89,"version_count":90,"cve_count":82,"kev_count":11,"last_cve_update":67},174318,"libxrender",10,{"id":92,"product_name":93,"version_count":90,"cve_count":82,"kev_count":11,"last_cve_update":67},174320,"libxv",{"id":95,"product_name":96,"version_count":71,"cve_count":82,"kev_count":11,"last_cve_update":49},174326,"x11r7",{"id":98,"product_name":99,"version_count":100,"cve_count":82,"kev_count":11,"last_cve_update":101},174327,"xdm",1,"2006-10-10",{"id":103,"product_name":104,"version_count":71,"cve_count":82,"kev_count":11,"last_cve_update":105},174329,"x_font_server","2007-10-05",{"id":107,"product_name":108,"version_count":100,"cve_count":100,"kev_count":11,"last_cve_update":49},174328,"xf86dga",{"id":110,"product_name":111,"version_count":100,"cve_count":100,"kev_count":11,"last_cve_update":49},174309,"emu-linux-x87-xlibs",{"id":113,"product_name":114,"version_count":11,"cve_count":100,"kev_count":11,"last_cve_update":58},174322,"mit-shm",{"id":116,"product_name":117,"version_count":100,"cve_count":100,"kev_count":11,"last_cve_update":49},174331,"xinit",{"id":119,"product_name":120,"version_count":100,"cve_count":100,"kev_count":11,"last_cve_update":49},174332,"xload",{"id":122,"product_name":123,"version_count":90,"cve_count":100,"kev_count":11,"last_cve_update":67},174321,"libxvmc",{"id":125,"product_name":126,"version_count":11,"cve_count":100,"kev_count":11,"last_cve_update":67},174319,"libxtst",{"id":128,"product_name":129,"version_count":81,"cve_count":100,"kev_count":11,"last_cve_update":67},174313,"libxfixes",{"id":131,"product_name":132,"version_count":76,"cve_count":100,"kev_count":11,"last_cve_update":133},174312,"libxdmcp","2018-07-27",{"id":135,"product_name":136,"version_count":11,"cve_count":100,"kev_count":11,"last_cve_update":58},174323,"tog-cup",{"id":138,"product_name":139,"version_count":100,"cve_count":100,"kev_count":11,"last_cve_update":49},174337,"xterm",{"id":141,"product_name":142,"version_count":11,"cve_count":100,"kev_count":11,"last_cve_update":58},174310,"evi","X.org is a technology vendor with 31 tracked products and 153 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[145,154,161,167,173,178,183,188,193,197],{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"cvssVersion":150,"severity":151,"isKev":152,"epssScore":153},"CVE-2018-14665","A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.","2018-10-25",6.6,"v3.0","Medium",false,0.2704,{"cveId":155,"description":156,"publishedDate":157,"cvssScore":90,"cvssVersion":158,"severity":159,"isKev":152,"epssScore":160},"CVE-1999-0526","An X server's access control is disabled (e.g. through an \"xhost +\" command) and allows anyone to connect to the server.","1997-07-01","v2","Critical",0.20817,{"cveId":162,"description":163,"publishedDate":105,"cvssScore":164,"cvssVersion":158,"severity":165,"isKev":152,"epssScore":166},"CVE-2007-4990","The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.",7.5,"High",0.10737,{"cveId":168,"description":169,"publishedDate":83,"cvssScore":170,"cvssVersion":171,"severity":159,"isKev":152,"epssScore":172},"CVE-2021-31535","LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intended for server-side color lookup) contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allowed by the protocol (and also longer than the maximum packet size for normal-sized packets). The user-controlled data exceeding the maximum size is then interpreted by the server as additional X protocol requests and executed, e.g., to disable X server authorization completely. For example, if the victim encounters malicious terminal control sequences for color codes, then the attacker may be able to take full control of the running graphical session.",9.8,"v3.1",0.10634,{"cveId":174,"description":175,"publishedDate":176,"cvssScore":170,"cvssVersion":150,"severity":159,"isKev":152,"epssScore":177},"CVE-2018-14600","An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.","2018-08-24",0.09341,{"cveId":179,"description":180,"publishedDate":181,"cvssScore":90,"cvssVersion":158,"severity":159,"isKev":152,"epssScore":182},"CVE-2004-0914","Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.","2005-01-10",0.08698,{"cveId":184,"description":185,"publishedDate":186,"cvssScore":164,"cvssVersion":158,"severity":165,"isKev":152,"epssScore":187},"CVE-2004-0687","Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.","2004-10-20",0.08052,{"cveId":189,"description":190,"publishedDate":191,"cvssScore":170,"cvssVersion":150,"severity":159,"isKev":152,"epssScore":192},"CVE-2016-10164","Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via (1) the number of extensions or (2) their concatenated length in a crafted XPM file, which triggers a heap-based buffer overflow.","2017-02-01",0.0759,{"cveId":194,"description":195,"publishedDate":186,"cvssScore":164,"cvssVersion":158,"severity":165,"isKev":152,"epssScore":196},"CVE-2004-0688","Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.",0.0725,{"cveId":198,"description":199,"publishedDate":200,"cvssScore":201,"cvssVersion":158,"severity":165,"isKev":152,"epssScore":202},"CVE-2007-1351","Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.","2007-04-06",8.5,0.05586,[],[205,206,207,208,209,210,211,212,213,214],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":11,"last_cve_update":13},{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":11,"last_cve_update":43},{"id":45,"product_name":46,"version_count":47,"cve_count":48,"kev_count":11,"last_cve_update":49},{"id":51,"product_name":8,"version_count":47,"cve_count":52,"kev_count":11,"last_cve_update":53},{"id":55,"product_name":56,"version_count":11,"cve_count":57,"kev_count":11,"last_cve_update":58},{"id":60,"product_name":61,"version_count":62,"cve_count":47,"kev_count":11,"last_cve_update":43},{"id":64,"product_name":65,"version_count":66,"cve_count":47,"kev_count":11,"last_cve_update":67},{"title":216,"metaDescription":217,"keywords":218,"structuredData":219},"X.org - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for X.org covering 31 products with 153 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","X.org vulnerabilities, X.org security, X.org CVE, X.org threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":220,"@type":221,"name":222,"description":217,"url":223},"https:\u002F\u002Fschema.org","Organization","X.org","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fx.org",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":225,"apiVersion":226},"2026-10-17T11:56:01.991Z","3.0"]