Known vulnerabilities in xorg-x11-server-Xwayland (Red Hat package)
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:xorg-x11-server-xwayland_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
43
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
21.1.3-2.el8_6.8
22.1.9-8.el9_4.3
21.1.3-10.el9_2.2
21.1.3-13.el8_8.2
23.2.7-6.el9_6.3
24.1.5-6.el10_0.2
21.1.3-2.el8_6.7
21.1.3-13.el8_8.1
24.1.9-4.el9_8.3
24.1.9-4.el10_2.3
21.1.3-20.el8_10.3
24.1.5-6.el10_0.1
23.2.7-6.el9_6.1
21.1.3-10.el9_2.1
22.1.9-8.el9_4.1
24.1.9-4.el10_2.2
24.1.9-4.el9_8.2
21.1.3-20.el8_10.2
21.1.3-2.el8_6.6
21.1.3-13.el8_8
21.1.3-20.el8_10
23.2.7-6.el9_7
24.1.5-6.el10_1
21.1.3-9.el9_2
21.1.3-2.el8_6.5
21.1.3-4.el9_0
21.1.3-12.el8_8
22.1.9-7.el9_4
24.1.5-5.el10_1
23.2.7-5.el9_7
24.1.5-5.el10_0
21.1.3-19.el8_10
23.2.7-3.el9_6
21.1.3-2.el8_6.4
21.1.3-11.el8_8
21.1.3-3.el9_0
21.1.3-8.el9_2
22.1.9-6.el9_4
21.1.3-18.el8_10
24.1.5-4.el10_0
23.2.7-4.el9_6
23.2.7-1.el9
21.1.3-17.el8_10
21.1.3-16.el8_10
21.1.3-15.el8
22.1.9-5.el9
21.1.3-12.el8
22.1.9-2.el9
21.1.3-10.el8
21.1.3-7.el9
21.1.3-3.el9
21.1.3-6.el8
21.1.3-2.el8
Vulnerabilities (43)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125987 - Integer underflow CVE-2026-33999 |
CWE-191 | Low | 21.1.3-2.el8_6.6, 21.1.3-13.el8_8, 21.1.3-20.el8_10, 23.2.7-6.el9_7, 24.1.5-6.el10_1 | 14.04.2026 |
SB20260414114 SB2026041559 SB2026041592 and 36 more |
||
| #VU125988 - Out-of-bounds read CVE-2026-34000 |
CWE-125 | Low | 21.1.3-2.el8_6.6, 21.1.3-13.el8_8 | 14.04.2026 |
SB20260414114 SB2026041559 SB2026041592 and 27 more |
||
| #VU125989 - Use After Free CVE-2026-34001 |
CWE-416 | Low | 21.1.3-2.el8_6.6, 21.1.3-13.el8_8, 21.1.3-20.el8_10, 23.2.7-6.el9_7, 24.1.5-6.el10_1 | 14.04.2026 |
SB20260414114 SB2026041559 SB2026041592 and 36 more |
||
| #VU125990 - Out-of-bounds read CVE-2026-34002 |
CWE-125 | Low | 21.1.3-2.el8_6.6, 21.1.3-13.el8_8 | 14.04.2026 |
SB20260414114 SB2026041559 SB2026041592 and 27 more |
||
| #VU125991 - Out-of-bounds read CVE-2026-34003 |
CWE-125 | Low | 21.1.3-2.el8_6.6, 21.1.3-13.el8_8, 21.1.3-20.el8_10, 23.2.7-6.el9_7, 24.1.5-6.el10_1 | 14.04.2026 |
SB20260414114 SB2026041559 SB2026041592 and 36 more |
||
| #VU117712 - Integer overflow CVE-2025-62231 |
CWE-190 | Low | 21.1.3-2.el8_6.5, 21.1.3-4.el9_0, 21.1.3-9.el9_2, 21.1.3-12.el8_8, 21.1.3-19.el8_10, 22.1.9-7.el9_4, 23.2.7-5.el9_7, 24.1.5-5.el10_0, 24.1.5-5.el10_1 | 28.10.2025 |
SB2025102876 SB2025102877 SB2025102878 and 52 more |
||
| #VU117711 - Use After Free CVE-2025-62230 |
CWE-416 | Low | 21.1.3-2.el8_6.5, 21.1.3-4.el9_0, 21.1.3-9.el9_2, 21.1.3-12.el8_8, 21.1.3-19.el8_10, 22.1.9-7.el9_4, 23.2.7-5.el9_7, 24.1.5-5.el10_0, 24.1.5-5.el10_1 | 28.10.2025 |
SB2025102876 SB2025102877 SB2025102878 and 52 more |
||
| #VU117710 - Use After Free CVE-2025-62229 |
CWE-416 | Low | 21.1.3-2.el8_6.5, 21.1.3-4.el9_0, 21.1.3-9.el9_2, 21.1.3-12.el8_8, 21.1.3-19.el8_10, 22.1.9-7.el9_4, 23.2.7-5.el9_7, 24.1.5-5.el10_0, 24.1.5-5.el10_1 | 28.10.2025 |
SB2025102876 SB2025102877 SB2025102878 and 52 more |
||
| #VU111231 - Integer overflow CVE-2025-49180 |
CWE-190 | Low | 21.1.3-2.el8_6.4, 21.1.3-3.el9_0, 21.1.3-8.el9_2, 21.1.3-11.el8_8, 21.1.3-18.el8_10, 22.1.9-6.el9_4, 23.2.7-4.el9_6, 24.1.5-4.el10_0 | 17.06.2025 |
SB2025061729 SB2025061730 SB2025061739 and 52 more |
||
| #VU111230 - Integer overflow CVE-2025-49179 |
CWE-190 | Low | 21.1.3-2.el8_6.4, 21.1.3-3.el9_0, 21.1.3-8.el9_2, 21.1.3-11.el8_8, 21.1.3-18.el8_10, 22.1.9-6.el9_4, 23.2.7-4.el9_6, 24.1.5-4.el10_0 | 17.06.2025 |
SB2025061729 SB2025061730 SB2025061739 and 52 more |
||
| #VU111229 - Resource Management Errors CVE-2025-49178 |
CWE-399 | Low | 21.1.3-2.el8_6.4, 21.1.3-3.el9_0, 21.1.3-8.el9_2, 21.1.3-11.el8_8, 21.1.3-18.el8_10, 22.1.9-6.el9_4, 23.2.7-4.el9_6, 24.1.5-4.el10_0 | 17.06.2025 |
SB2025061729 SB2025061730 SB2025061739 and 52 more |
||
| #VU111228 - Exposure of sensitive information to an unauthorized actor CVE-2025-49177 |
CWE-200 | Low | 22.1.9-6.el9_4, 24.1.5-4.el10_0 | 17.06.2025 |
SB2025061729 SB2025061730 SB2025061739 and 20 more |
||
| #VU111227 - Integer overflow CVE-2025-49176 |
CWE-190 | Low | 21.1.3-2.el8_6.4, 21.1.3-3.el9_0, 21.1.3-8.el9_2, 21.1.3-11.el8_8, 21.1.3-18.el8_10, 22.1.9-6.el9_4, 23.2.7-4.el9_6, 24.1.5-4.el10_0 | 17.06.2025 |
SB2025061729 SB2025061730 SB2025061739 and 58 more |
||
| #VU111226 - Out-of-bounds read CVE-2025-49175 |
CWE-125 | Low | 21.1.3-2.el8_6.4, 21.1.3-3.el9_0, 21.1.3-8.el9_2, 21.1.3-11.el8_8, 21.1.3-18.el8_10, 22.1.9-6.el9_4, 23.2.7-4.el9_6, 24.1.5-4.el10_0 | 17.06.2025 |
SB2025061729 SB2025061730 SB2025061739 and 52 more |
||
| #VU99493 - Heap-based Buffer Overflow CVE-2024-9632 |
CWE-122 | Low | 21.1.3-17.el8_10 | 29.10.2024 |
SB2024102981 SB2024102982 SB2024102984 and 35 more |
||
| #VU88118 - Use After Free CVE-2024-31083 |
CWE-416 | Low | 21.1.3-16.el8_10, 23.2.7-1.el9 | 04.04.2024 |
SB2024040412 SB2024040418 SB2024040419 and 48 more |
||
| #VU88116 - Heap-based Buffer Overflow CVE-2024-31081 |
CWE-122 | Low | 21.1.3-16.el8_10, 23.2.7-1.el9 | 04.04.2024 |
SB2024040412 SB2024040418 SB2024040419 and 45 more |
||
| #VU88115 - Heap-based Buffer Overflow CVE-2024-31080 |
CWE-122 | Low | 21.1.3-16.el8_10, 23.2.7-1.el9 | 04.04.2024 |
SB2024040412 SB2024040418 SB2024040419 and 46 more |
||
| #VU85452 - Heap-based Buffer Overflow CVE-2024-21886 |
CWE-122 | Low | 21.1.3-15.el8, 22.1.9-5.el9 | 16.01.2024 |
SB2024011648 SB2024011649 SB2024011650 and 42 more |
||
| #VU85449 - Improper input validation CVE-2024-0408 |
CWE-20 | Low | 21.1.3-15.el8, 22.1.9-5.el9 | 16.01.2024 |
SB2024011648 SB2024011649 SB2024011650 and 32 more |
Showing elements 1 - 20 out of 43