🔐 CVE Alert

CVE-2026-93515

UNKNOWN 0.0

.Org Server Present Extension Use-After-Free

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malicious X clients to crash or potentially execute code in the X server context.

CWE CWE-416
Vendor x.org
Product xorg-x11-server
Published Oct 28, 2026
Stay Ahead of the Next One

Get instant alerts for x.org xorg-x11-server

Be the first to know when new unknown vulnerabilities affecting x.org xorg-x11-server are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

X.org / xorg-x11-server
0 < 21.1.25
x.org / xwayland
0 < 24.1.14

References

NVD ↗ CVE.org ↗ EPSS Data ↗
gitlab.freedesktop.org: https://gitlab.freedesktop.org/xorg/xserver/-/commit/1b6955c3108e6b43433aefe860070708e6f43d1b

Credits

Anonymous working with TrendAI Zero Day Initiative