CVE-2026-34002

MEDIUM 6.1

Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling

CVSS Score

6.1

EPSS Score

0.0%

EPSS Percentile

8th

A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.

CWE	CWE-805
Vendor	red hat
Product	red hat enterprise linux 10.0 extended update support
Published	May 5, 2026
Last Updated	Jun 8, 2026

Stay Ahead of the Next One

Get instant alerts for red hat red hat enterprise linux 10.0 extended update support

Be the first to know when new medium vulnerabilities affecting red hat red hat enterprise linux 10.0 extended update support are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

Low

Affected Versions

Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION

All versions affected

Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support

All versions affected

Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support

All versions affected

Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

All versions affected

Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

All versions affected

Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

All versions affected

Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service

All versions affected

Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service

All versions affected

Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service

All versions affected

Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service

All versions affected

Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service

All versions affected

Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 6

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

Credits

Red Hat would like to thank Jan-Niklas Sohn (TrendAI Zero Day Initiative) for reporting this issue.