A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland | Jun 17, 2026 | Jun 17, 2026 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-source | Jun 16, 2026 | Jun 16, 2026 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-moduleUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervncUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-debugsource | Jun 15, 2026 | Jun 5, 2026 |
| Debian | — | Upgrade xorg-server | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade xorg-serverUpgrade xwayland | Jun 15, 2026 | Jun 1, 2026 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Aug 17, 2026 | Aug 17, 2026 |
| Redhat_linux | — | Upgrade tigervnc-server-minimalUpgrade tigervnc-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XnestNo solution existsUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-develUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc | Jun 19, 2026 | Jun 2, 2026 |
| Rocky_linux | — | Upgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervncUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xorg | Jun 22, 2026 | Jun 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub