Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 04:05 UTC

Critical in the last 24 hours

1602 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

154-74% vs 7-day avg of 597

2 critical, 44 high, 61 medium, 27 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Medium	5.5	CVE-2026-94287	A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion. x.orgx.org libXpm	NVD	Sep 28 09:17 UTC
CVE-2026-94287A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion. From the advisory A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affects x.org x.org libXpm NIST National Vulnerability DatabasePublished Sep 28, 2026 09:17 UTC Read the advisory
	High	7.1	CVE-2026-94286	An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. x.orgx.org libXtst	NVD	Sep 28 09:17 UTC
CVE-2026-94286An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. From the advisory An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affects x.org x.org libXtst NIST National Vulnerability DatabasePublished Sep 28, 2026 09:17 UTC Read the advisory
	Medium	5.1	CVE-2026-94285	An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. x.orgx.org libX11	NVD	Sep 28 09:17 UTC
CVE-2026-94285An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. From the advisory An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityLow How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affects x.org x.org libX11 NIST National Vulnerability DatabasePublished Sep 28, 2026 09:17 UTC Read the advisory
	Medium	5.5	CVE-2026-94284	An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. x.orgx.org libX11	NVD	Sep 28 09:17 UTC
CVE-2026-94284An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. From the advisory An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affects x.org x.org libX11 NIST National Vulnerability DatabasePublished Sep 28, 2026 09:17 UTC Read the advisory
	Medium	6.5	CVE-2026-94283	An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. x.orgx.org libX11	NVD	Sep 28 09:17 UTC
CVE-2026-94283An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. From the advisory An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affects x.org x.org libX11 NIST National Vulnerability DatabasePublished Sep 28, 2026 09:17 UTC Read the advisory
	Medium	5.6	CVE-2026-94282	An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client. x.orgx.org libXi	NVD	Sep 28 09:17 UTC
CVE-2026-94282An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client. From the advisory An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H Affects x.org x.org libXi NIST National Vulnerability DatabasePublished Sep 28, 2026 09:17 UTC Read the advisory
	High	7.8	RHSA-2026:89747	xorg-x11-server security update Red Hat, x.orgRed Hat Enterprise Linux, Red Hat Enterprise Linux 8, x.org xorg-x11-server	Red Hat Security Advisories	Oct 26 03:59 UTC
RHSA-2026:89747CVE-2026-88812CVE-2026-93516CVE-2026-93517CVE-2026-935183 morexorg-x11-server security update Executive summary Red Hat has released an update for xorg-x11-server, the X Window System server, on Red Hat Enterprise Linux 8. The advisory rates the update as Important and describes multiple flaws that could allow arbitrary code execution or privilege escalation. Technical summary The advisory lists eight CVEs (CVE-2026-93516, CVE-2026-93521, CVE-2026-88812, CVE-2026-93523, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520) covering use-after-free, double-free, heap and buffer overflows, out-of-bounds writes, integer truncation, and privilege escalation via crafted RandR requests. Attack vector, required privileges, and user interaction are not stated in the advisory text. Affected package versions and fixed versions are not stated in the text provided. No workarounds or detection guidance are stated. CVSS base scores are referenced via the CVE pages but are not given in the advisory text. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Red Hat x.org Red Hat Enterprise Linux Red Hat Enterprise Linux 8 x.org xorg-x11-server Red Hat Product SecurityPublished Oct 26, 2026 03:59 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee