CVE-2026-93524
NoneCVSS
—
EPSS
0.2%
Published
Oct 28, 2026
CISA due date
—
The record
A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information from X server memory or potentially crash the X server.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-57185 Asterisk is an open source private branch exchange and telephony toolkit. CWE-126
- CVE-2026-53920 odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. CWE-126
- CVE-2026-55606 odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. CWE-126
- CVE-2026-107928 When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory… CWE-126
- CVE-2026-112404 Pillow is a Python imaging library. CWE-126
- CVE-2026-112394 Pillow is a Python imaging library. CWE-126
- CVE-2026-85745 MariaDB server is a community developed fork of MySQL server. CWE-126
- CVE-2026-85935 Buffer over-read in Windows USB Driver allows an authorized attacker to disclose… CWE-126