CVE-2026-34003
HIGHXorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access
Title source: cnaDescription
A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.
References (8)
Scores
CVSS v3
7.8
EPSS
0.0001
EPSS Percentile
1.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-125
Status
published
Products (11)
Red Hat/Red Hat Enterprise Linux 10
Red Hat/Red Hat Enterprise Linux 10
0:24.1.5-6.el10_1
Red Hat/Red Hat Enterprise Linux 6
Red Hat/Red Hat Enterprise Linux 7
Red Hat/Red Hat Enterprise Linux 8
Red Hat/Red Hat Enterprise Linux 8
0:1.20.11-28.el8_10
Red Hat/Red Hat Enterprise Linux 8
0:21.1.3-20.el8_10
Red Hat/Red Hat Enterprise Linux 9
Red Hat/Red Hat Enterprise Linux 9
0:1.15.0-6.el9_7.1
Red Hat/Red Hat Enterprise Linux 9
0:1.20.11-33.el9_7
... and 1 more
Published
Apr 23, 2026
Tracked Since
Apr 23, 2026