Orta CVSS 5.3
CVE-2026-93536: CVE-2026-93536: yığın (heap) taşması
Açıklama (NVD)
A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code.
Özet bilgiler
- CVSS v3.1
- 5.3
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H - EPSS
- %0,17 (yüzdelik 6)
- CWE
- CWE-122
- Yama
- Yok / bilinmiyor