Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
BELL-CVE-2026-93520 (CVE-2026-93520)
Vulnerability from osv_bellsoft – Published: 2026-10-08 06:05 – Updated: 2026-10-12 23:42 – Source website
VLAI
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"package": {
"ecosystem": "Alpaquita:23",
"name": "xorg-server",
"purl": "pkg:apk/alpaquita/xorg-server?arch=source\u0026distro=23"
},
"ranges": [
{
"events": [
{
"introduced": "21.1.4-r1"
},
{
"fixed": "21.1.25-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Alpaquita:25",
"name": "xorg-server",
"purl": "pkg:apk/alpaquita/xorg-server?arch=source\u0026distro=25"
},
"ranges": [
{
"events": [
{
"introduced": "21.1.16-r0"
},
{
"fixed": "21.1.25-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Alpaquita:stream",
"name": "xorg-server",
"purl": "pkg:apk/alpaquita/xorg-server?arch=source\u0026distro=stream"
},
"ranges": [
{
"events": [
{
"introduced": "21.1.4-r1"
},
{
"fixed": "21.1.25-r0"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"id": "BELL-CVE-2026-93520",
"modified": "2026-10-12T23:42:49.761449Z",
"published": "2026-10-08T06:05:43.841285Z",
"references": [
{
"type": "ADVISORY",
"url": "https://docs.bell-sw.com/security/cves/CVE-2026-93520"
}
],
"schema_version": "1.7.4",
"upstream": [
"CVE-2026-93520"
]
}
OPENSUSE-SU-2026:12104-1
Vulnerability from csaf_opensuse - Published: 2026-10-10 00:00 - Updated: 2026-10-11 11:56Summary
xorg-x11-server-21.1.24-2.1 on GA media
Severity
Moderate
Scope
11 vulnerabilities in this advisory, including CVE-2026-93520.
CVE-2026-93520
7.8 (High)
Recommended: 24 products
OPENSUSE-SU-2026:12105-1
Vulnerability from csaf_opensuse - Published: 2026-10-10 00:00 - Updated: 2026-10-11 11:56Summary
xwayland-24.1.13-2.1 on GA media
Severity
Moderate
Scope
12 vulnerabilities in this advisory, including CVE-2026-93520.
CVE-2026-93520
7.8 (High)
Recommended: 8 products
OPENSUSE-SU-2026:22085-1
Vulnerability from csaf_opensuse - Published: 2026-10-12 08:18 - Updated: 2026-10-19 17:25Summary
Security update for xwayland
Severity
Important
Scope
12 vulnerabilities in this advisory, including CVE-2026-93520.
CVE-2026-93520
7.8 (High)
Recommended: 8 products
RHSA-2026:84574
Vulnerability from csaf_opensuse - Published: 2026-10-19 00:00 - Updated: 2026-10-19 17:19Summary
security update for xorg-x11-server
Severity
Important
Scope
5 vulnerabilities in this advisory, including CVE-2026-93520.
CVE-2026-93520
7.8 (High)
Recommended: 9 products
RHSA-2026:85191
Vulnerability from csaf_redhat - Published: 2026-10-19 14:18 - Updated: 2026-10-19 17:16Summary
Red Hat Security Advisory: xorg-x11-server-Xwayland security update
Severity
Important
Scope
9 vulnerabilities in this advisory, including CVE-2026-93520.
CVE-2026-93520
A flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.
7.8 (High)
Fixed: 25 products
https://access.redhat.com/errata/RHSA-2026:85191
RHSA-2026:85193
Vulnerability from csaf_redhat - Published: 2026-10-19 14:46 - Updated: 2026-10-19 17:16Summary
Red Hat Security Advisory: xorg-x11-server-Xwayland security update
Severity
Important
Scope
9 vulnerabilities in this advisory, including CVE-2026-93520.
CVE-2026-93520
A flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.
7.8 (High)
Fixed: 29 products
https://access.redhat.com/errata/RHSA-2026:85193
SUSE-SU-2026:4636-1
Vulnerability from csaf_suse - Published: 2026-10-13 07:43 - Updated: 2026-10-13 16:30Summary
Security update for xorg-x11-server
Severity
Important
Scope
10 vulnerabilities in this advisory, including CVE-2026-93520.
CVE-2026-93520
7.8 (High)
Recommended: 34 products
SUSE-SU-2026:4645-1
Vulnerability from csaf_suse - Published: 2026-10-13 16:47 - Updated: 2026-10-14 16:42Summary
Security update for xorg-x11-server
Severity
Important
Scope
11 vulnerabilities in this advisory, including CVE-2026-93520.
CVE-2026-93520
7.8 (High)
Recommended: 72 products
SUSE-SU-2026:4647-1
Vulnerability from csaf_suse - Published: 2026-10-13 16:48 - Updated: 2026-10-14 16:42Summary
Security update for xorg-x11-server
Severity
Important
Scope
11 vulnerabilities in this advisory, including CVE-2026-93520.
CVE-2026-93520
7.8 (High)
Recommended: 48 products
UBUNTU-CVE-2026-93520 (CVE-2026-93520)
Vulnerability from osv_ubuntu – Published: 2026-10-07 00:00 – Updated: 2026-10-19 20:37 – Source website
VLAI
Details
[XKB ChangeKeycodeRange Heap Out-of-Bounds Write]
Severity
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xdmx",
"binary_version": "2:1.15.1-0ubuntu2.11+esm12"
},
{
"binary_name": "xdmx-tools",
"binary_version": "2:1.15.1-0ubuntu2.11+esm12"
},
{
"binary_name": "xnest",
"binary_version": "2:1.15.1-0ubuntu2.11+esm12"
},
{
"binary_name": "xorg-server-source",
"binary_version": "2:1.15.1-0ubuntu2.11+esm12"
},
{
"binary_name": "xserver-common",
"binary_version": "2:1.15.1-0ubuntu2.11+esm12"
},
{
"binary_name": "xserver-xephyr",
"binary_version": "2:1.15.1-0ubuntu2.11+esm12"
},
{
"binary_name": "xserver-xorg-core",
"binary_version": "2:1.15.1-0ubuntu2.11+esm12"
},
{
"binary_name": "xserver-xorg-xmir",
"binary_version": "2:1.15.1-0ubuntu2.11+esm12"
},
{
"binary_name": "xvfb",
"binary_version": "2:1.15.1-0ubuntu2.11+esm12"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "xorg-server",
"purl": "pkg:deb/ubuntu/xorg-server@2:1.15.1-0ubuntu2.11+esm12?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:1.14.3-3ubuntu2",
"2:1.14.3-3ubuntu3",
"2:1.14.3-3ubuntu4",
"2:1.14.3-5ubuntu1",
"2:1.14.4-1ubuntu1",
"2:1.14.4-1ubuntu2",
"2:1.14.4.901-0ubuntu2",
"2:1.14.5-1ubuntu2",
"2:1.14.5-1ubuntu4",
"2:1.15.0-1ubuntu1",
"2:1.15.0-1ubuntu2",
"2:1.15.0-1ubuntu3",
"2:1.15.0-1ubuntu4",
"2:1.15.0-1ubuntu6",
"2:1.15.0-1ubuntu7",
"2:1.15.1-0ubuntu1",
"2:1.15.1-0ubuntu2",
"2:1.15.1-0ubuntu2.1",
"2:1.15.1-0ubuntu2.4",
"2:1.15.1-0ubuntu2.5",
"2:1.15.1-0ubuntu2.6",
"2:1.15.1-0ubuntu2.7",
"2:1.15.1-0ubuntu2.9",
"2:1.15.1-0ubuntu2.10",
"2:1.15.1-0ubuntu2.11",
"2:1.15.1-0ubuntu2.11+esm2",
"2:1.15.1-0ubuntu2.11+esm3",
"2:1.15.1-0ubuntu2.11+esm4",
"2:1.15.1-0ubuntu2.11+esm5",
"2:1.15.1-0ubuntu2.11+esm6",
"2:1.15.1-0ubuntu2.11+esm7",
"2:1.15.1-0ubuntu2.11+esm8",
"2:1.15.1-0ubuntu2.11+esm9",
"2:1.15.1-0ubuntu2.11+esm11",
"2:1.15.1-0ubuntu2.11+esm12"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xdmx",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
},
{
"binary_name": "xdmx-tools",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
},
{
"binary_name": "xmir",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
},
{
"binary_name": "xnest",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
},
{
"binary_name": "xorg-server-source",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
},
{
"binary_name": "xserver-common",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
},
{
"binary_name": "xserver-xephyr",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
},
{
"binary_name": "xserver-xorg-core",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
},
{
"binary_name": "xserver-xorg-legacy",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
},
{
"binary_name": "xserver-xorg-xmir",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
},
{
"binary_name": "xvfb",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
},
{
"binary_name": "xwayland",
"binary_version": "2:1.18.4-0ubuntu0.12+esm18"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "xorg-server",
"purl": "pkg:deb/ubuntu/xorg-server@2:1.18.4-0ubuntu0.12+esm18?arch=source\u0026distro=esm-infra/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:1.17.2-1ubuntu9",
"2:1.17.2-1ubuntu10",
"2:1.17.3-2ubuntu1",
"2:1.17.3-2ubuntu2",
"2:1.17.3-2ubuntu3",
"2:1.17.3-2ubuntu4",
"2:1.18.1-1ubuntu3",
"2:1.18.1-1ubuntu4",
"2:1.18.3-1ubuntu1",
"2:1.18.3-1ubuntu2",
"2:1.18.3-1ubuntu2.2",
"2:1.18.3-1ubuntu2.3",
"2:1.18.4-0ubuntu0.1",
"2:1.18.4-0ubuntu0.2",
"2:1.18.4-0ubuntu0.3",
"2:1.18.4-0ubuntu0.4",
"2:1.18.4-0ubuntu0.6",
"2:1.18.4-0ubuntu0.7",
"2:1.18.4-0ubuntu0.8",
"2:1.18.4-0ubuntu0.9",
"2:1.18.4-0ubuntu0.10",
"2:1.18.4-0ubuntu0.11",
"2:1.18.4-0ubuntu0.12",
"2:1.18.4-0ubuntu0.12+esm1",
"2:1.18.4-0ubuntu0.12+esm2",
"2:1.18.4-0ubuntu0.12+esm4",
"2:1.18.4-0ubuntu0.12+esm5",
"2:1.18.4-0ubuntu0.12+esm6",
"2:1.18.4-0ubuntu0.12+esm8",
"2:1.18.4-0ubuntu0.12+esm9",
"2:1.18.4-0ubuntu0.12+esm10",
"2:1.18.4-0ubuntu0.12+esm12",
"2:1.18.4-0ubuntu0.12+esm13",
"2:1.18.4-0ubuntu0.12+esm14",
"2:1.18.4-0ubuntu0.12+esm15",
"2:1.18.4-0ubuntu0.12+esm16",
"2:1.18.4-0ubuntu0.12+esm17",
"2:1.18.4-0ubuntu0.12+esm18"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xmir-hwe-16.04",
"binary_version": "2:1.19.6-1ubuntu4.1~16.04.6+esm10"
},
{
"binary_name": "xorg-server-source-hwe-16.04",
"binary_version": "2:1.19.6-1ubuntu4.1~16.04.6+esm10"
},
{
"binary_name": "xserver-xephyr-hwe-16.04",
"binary_version": "2:1.19.6-1ubuntu4.1~16.04.6+esm10"
},
{
"binary_name": "xserver-xorg-core-hwe-16.04",
"binary_version": "2:1.19.6-1ubuntu4.1~16.04.6+esm10"
},
{
"binary_name": "xserver-xorg-dev-hwe-16.04",
"binary_version": "2:1.19.6-1ubuntu4.1~16.04.6+esm10"
},
{
"binary_name": "xserver-xorg-legacy-hwe-16.04",
"binary_version": "2:1.19.6-1ubuntu4.1~16.04.6+esm10"
},
{
"binary_name": "xwayland-hwe-16.04",
"binary_version": "2:1.19.6-1ubuntu4.1~16.04.6+esm10"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "xorg-server-hwe-16.04",
"purl": "pkg:deb/ubuntu/xorg-server-hwe-16.04@2:1.19.6-1ubuntu4.1~16.04.6+esm10?arch=source\u0026distro=esm-infra/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:1.18.4-1ubuntu6.1~16.04.1",
"2:1.18.4-1ubuntu6.1~16.04.2",
"2:1.19.3-1ubuntu1~16.04.2",
"2:1.19.3-1ubuntu1~16.04.3",
"2:1.19.3-1ubuntu1~16.04.4",
"2:1.19.5-0ubuntu2~16.04.1",
"2:1.19.6-1ubuntu4~16.04.1",
"2:1.19.6-1ubuntu4.1~16.04.1",
"2:1.19.6-1ubuntu4.1~16.04.2",
"2:1.19.6-1ubuntu4.1~16.04.3",
"2:1.19.6-1ubuntu4.1~16.04.4",
"2:1.19.6-1ubuntu4.1~16.04.5",
"2:1.19.6-1ubuntu4.1~16.04.6",
"2:1.19.6-1ubuntu4.1~16.04.6+esm1",
"2:1.19.6-1ubuntu4.1~16.04.6+esm3",
"2:1.19.6-1ubuntu4.1~16.04.6+esm4",
"2:1.19.6-1ubuntu4.1~16.04.6+esm5",
"2:1.19.6-1ubuntu4.1~16.04.6+esm6",
"2:1.19.6-1ubuntu4.1~16.04.6+esm7",
"2:1.19.6-1ubuntu4.1~16.04.6+esm8",
"2:1.19.6-1ubuntu4.1~16.04.6+esm9",
"2:1.19.6-1ubuntu4.1~16.04.6+esm10"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xdmx",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
},
{
"binary_name": "xdmx-tools",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
},
{
"binary_name": "xmir",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
},
{
"binary_name": "xnest",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
},
{
"binary_name": "xorg-server-source",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
},
{
"binary_name": "xserver-common",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
},
{
"binary_name": "xserver-xephyr",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
},
{
"binary_name": "xserver-xorg-core",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
},
{
"binary_name": "xserver-xorg-legacy",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
},
{
"binary_name": "xserver-xorg-xmir",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
},
{
"binary_name": "xvfb",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
},
{
"binary_name": "xwayland",
"binary_version": "2:1.19.6-1ubuntu4.15+esm13"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "xorg-server",
"purl": "pkg:deb/ubuntu/xorg-server@2:1.19.6-1ubuntu4.15+esm13?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:1.19.5-0ubuntu2",
"2:1.19.6-1ubuntu1",
"2:1.19.6-1ubuntu2",
"2:1.19.6-1ubuntu3",
"2:1.19.6-1ubuntu4",
"2:1.19.6-1ubuntu4.1",
"2:1.19.6-1ubuntu4.2",
"2:1.19.6-1ubuntu4.3",
"2:1.19.6-1ubuntu4.4",
"2:1.19.6-1ubuntu4.5",
"2:1.19.6-1ubuntu4.6",
"2:1.19.6-1ubuntu4.7",
"2:1.19.6-1ubuntu4.8",
"2:1.19.6-1ubuntu4.9",
"2:1.19.6-1ubuntu4.10",
"2:1.19.6-1ubuntu4.11",
"2:1.19.6-1ubuntu4.12",
"2:1.19.6-1ubuntu4.13",
"2:1.19.6-1ubuntu4.14",
"2:1.19.6-1ubuntu4.15",
"2:1.19.6-1ubuntu4.15+esm1",
"2:1.19.6-1ubuntu4.15+esm3",
"2:1.19.6-1ubuntu4.15+esm4",
"2:1.19.6-1ubuntu4.15+esm5",
"2:1.19.6-1ubuntu4.15+esm7",
"2:1.19.6-1ubuntu4.15+esm8",
"2:1.19.6-1ubuntu4.15+esm9",
"2:1.19.6-1ubuntu4.15+esm10",
"2:1.19.6-1ubuntu4.15+esm11",
"2:1.19.6-1ubuntu4.15+esm12",
"2:1.19.6-1ubuntu4.15+esm13"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xorg-server-source-hwe-18.04",
"binary_version": "2:1.20.8-2ubuntu2.2~18.04.11+esm5"
},
{
"binary_name": "xserver-xephyr-hwe-18.04",
"binary_version": "2:1.20.8-2ubuntu2.2~18.04.11+esm5"
},
{
"binary_name": "xserver-xorg-core-hwe-18.04",
"binary_version": "2:1.20.8-2ubuntu2.2~18.04.11+esm5"
},
{
"binary_name": "xserver-xorg-dev-hwe-18.04",
"binary_version": "2:1.20.8-2ubuntu2.2~18.04.11+esm5"
},
{
"binary_name": "xserver-xorg-legacy-hwe-18.04",
"binary_version": "2:1.20.8-2ubuntu2.2~18.04.11+esm5"
},
{
"binary_name": "xwayland-hwe-18.04",
"binary_version": "2:1.20.8-2ubuntu2.2~18.04.11+esm5"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "xorg-server-hwe-18.04",
"purl": "pkg:deb/ubuntu/xorg-server-hwe-18.04@2:1.20.8-2ubuntu2.2~18.04.11+esm5?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:1.20.1-3ubuntu2.1~18.04.1",
"2:1.20.4-1ubuntu3~18.04.1",
"2:1.20.5+git20191008-0ubuntu1~18.04.1",
"2:1.20.8-2ubuntu2.1~18.04.1",
"2:1.20.8-2ubuntu2.2~18.04.1",
"2:1.20.8-2ubuntu2.2~18.04.2",
"2:1.20.8-2ubuntu2.2~18.04.3",
"2:1.20.8-2ubuntu2.2~18.04.4",
"2:1.20.8-2ubuntu2.2~18.04.5",
"2:1.20.8-2ubuntu2.2~18.04.6",
"2:1.20.8-2ubuntu2.2~18.04.7",
"2:1.20.8-2ubuntu2.2~18.04.8",
"2:1.20.8-2ubuntu2.2~18.04.9",
"2:1.20.8-2ubuntu2.2~18.04.10",
"2:1.20.8-2ubuntu2.2~18.04.11",
"2:1.20.8-2ubuntu2.2~18.04.11+esm1",
"2:1.20.8-2ubuntu2.2~18.04.11+esm2",
"2:1.20.8-2ubuntu2.2~18.04.11+esm3",
"2:1.20.8-2ubuntu2.2~18.04.11+esm4",
"2:1.20.8-2ubuntu2.2~18.04.11+esm5"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xdmx",
"binary_version": "2:1.20.13-1ubuntu1~20.04.20+esm1"
},
{
"binary_name": "xdmx-tools",
"binary_version": "2:1.20.13-1ubuntu1~20.04.20+esm1"
},
{
"binary_name": "xnest",
"binary_version": "2:1.20.13-1ubuntu1~20.04.20+esm1"
},
{
"binary_name": "xorg-server-source",
"binary_version": "2:1.20.13-1ubuntu1~20.04.20+esm1"
},
{
"binary_name": "xserver-common",
"binary_version": "2:1.20.13-1ubuntu1~20.04.20+esm1"
},
{
"binary_name": "xserver-xephyr",
"binary_version": "2:1.20.13-1ubuntu1~20.04.20+esm1"
},
{
"binary_name": "xserver-xorg-core",
"binary_version": "2:1.20.13-1ubuntu1~20.04.20+esm1"
},
{
"binary_name": "xserver-xorg-legacy",
"binary_version": "2:1.20.13-1ubuntu1~20.04.20+esm1"
},
{
"binary_name": "xvfb",
"binary_version": "2:1.20.13-1ubuntu1~20.04.20+esm1"
},
{
"binary_name": "xwayland",
"binary_version": "2:1.20.13-1ubuntu1~20.04.20+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "xorg-server",
"purl": "pkg:deb/ubuntu/xorg-server@2:1.20.13-1ubuntu1~20.04.20+esm1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:1.20.5+git20191008-0ubuntu1",
"2:1.20.6-1ubuntu1",
"2:1.20.7-2ubuntu1",
"2:1.20.7-2ubuntu2",
"2:1.20.8-2ubuntu2",
"2:1.20.8-2ubuntu2.1",
"2:1.20.8-2ubuntu2.2",
"2:1.20.8-2ubuntu2.3",
"2:1.20.8-2ubuntu2.4",
"2:1.20.8-2ubuntu2.6",
"2:1.20.9-2ubuntu1.1~20.04.1",
"2:1.20.9-2ubuntu1.2~20.04.1",
"2:1.20.9-2ubuntu1.2~20.04.2",
"2:1.20.11-1ubuntu1~20.04.2",
"2:1.20.13-1ubuntu1~20.04.2",
"2:1.20.13-1ubuntu1~20.04.3",
"2:1.20.13-1ubuntu1~20.04.4",
"2:1.20.13-1ubuntu1~20.04.5",
"2:1.20.13-1ubuntu1~20.04.6",
"2:1.20.13-1ubuntu1~20.04.8",
"2:1.20.13-1ubuntu1~20.04.9",
"2:1.20.13-1ubuntu1~20.04.12",
"2:1.20.13-1ubuntu1~20.04.14",
"2:1.20.13-1ubuntu1~20.04.15",
"2:1.20.13-1ubuntu1~20.04.16",
"2:1.20.13-1ubuntu1~20.04.17",
"2:1.20.13-1ubuntu1~20.04.18",
"2:1.20.13-1ubuntu1~20.04.19",
"2:1.20.13-1ubuntu1~20.04.20",
"2:1.20.13-1ubuntu1~20.04.20+esm1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xnest",
"binary_version": "2:21.1.4-2ubuntu1.7~22.04.16"
},
{
"binary_name": "xorg-server-source",
"binary_version": "2:21.1.4-2ubuntu1.7~22.04.16"
},
{
"binary_name": "xserver-common",
"binary_version": "2:21.1.4-2ubuntu1.7~22.04.16"
},
{
"binary_name": "xserver-xephyr",
"binary_version": "2:21.1.4-2ubuntu1.7~22.04.16"
},
{
"binary_name": "xserver-xorg-core",
"binary_version": "2:21.1.4-2ubuntu1.7~22.04.16"
},
{
"binary_name": "xserver-xorg-legacy",
"binary_version": "2:21.1.4-2ubuntu1.7~22.04.16"
},
{
"binary_name": "xvfb",
"binary_version": "2:21.1.4-2ubuntu1.7~22.04.16"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "xorg-server",
"purl": "pkg:deb/ubuntu/xorg-server@2:21.1.4-2ubuntu1.7~22.04.16?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:1.20.13-1ubuntu1",
"2:1.20.13-1ubuntu2",
"2:1.20.14-1ubuntu1",
"2:21.1.3-2ubuntu2",
"2:21.1.3-2ubuntu2.1",
"2:21.1.3-2ubuntu2.2",
"2:21.1.3-2ubuntu2.3",
"2:21.1.3-2ubuntu2.4",
"2:21.1.3-2ubuntu2.5",
"2:21.1.3-2ubuntu2.6",
"2:21.1.3-2ubuntu2.7",
"2:21.1.3-2ubuntu2.8",
"2:21.1.3-2ubuntu2.9",
"2:21.1.4-2ubuntu1.7~22.04.1",
"2:21.1.4-2ubuntu1.7~22.04.2",
"2:21.1.4-2ubuntu1.7~22.04.5",
"2:21.1.4-2ubuntu1.7~22.04.7",
"2:21.1.4-2ubuntu1.7~22.04.8",
"2:21.1.4-2ubuntu1.7~22.04.9",
"2:21.1.4-2ubuntu1.7~22.04.10",
"2:21.1.4-2ubuntu1.7~22.04.11",
"2:21.1.4-2ubuntu1.7~22.04.12",
"2:21.1.4-2ubuntu1.7~22.04.13",
"2:21.1.4-2ubuntu1.7~22.04.14",
"2:21.1.4-2ubuntu1.7~22.04.15",
"2:21.1.4-2ubuntu1.7~22.04.16"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xwayland",
"binary_version": "2:22.1.1-1ubuntu0.20"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "xwayland",
"purl": "pkg:deb/ubuntu/xwayland@2:22.1.1-1ubuntu0.20?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:21.1.2-0ubuntu1",
"2:21.1.3-1",
"2:21.1.3-1ubuntu1",
"2:21.1.4-1",
"2:22.1.0-1",
"2:22.1.1-1",
"2:22.1.1-1ubuntu0.1",
"2:22.1.1-1ubuntu0.2",
"2:22.1.1-1ubuntu0.3",
"2:22.1.1-1ubuntu0.4",
"2:22.1.1-1ubuntu0.5",
"2:22.1.1-1ubuntu0.6",
"2:22.1.1-1ubuntu0.7",
"2:22.1.1-1ubuntu0.9",
"2:22.1.1-1ubuntu0.10",
"2:22.1.1-1ubuntu0.11",
"2:22.1.1-1ubuntu0.12",
"2:22.1.1-1ubuntu0.13",
"2:22.1.1-1ubuntu0.14",
"2:22.1.1-1ubuntu0.15",
"2:22.1.1-1ubuntu0.17",
"2:22.1.1-1ubuntu0.18",
"2:22.1.1-1ubuntu0.19",
"2:22.1.1-1ubuntu0.20"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xnest",
"binary_version": "2:21.1.12-1ubuntu1.9"
},
{
"binary_name": "xorg-server-source",
"binary_version": "2:21.1.12-1ubuntu1.9"
},
{
"binary_name": "xserver-common",
"binary_version": "2:21.1.12-1ubuntu1.9"
},
{
"binary_name": "xserver-xephyr",
"binary_version": "2:21.1.12-1ubuntu1.9"
},
{
"binary_name": "xserver-xorg-core",
"binary_version": "2:21.1.12-1ubuntu1.9"
},
{
"binary_name": "xserver-xorg-legacy",
"binary_version": "2:21.1.12-1ubuntu1.9"
},
{
"binary_name": "xvfb",
"binary_version": "2:21.1.12-1ubuntu1.9"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "xorg-server",
"purl": "pkg:deb/ubuntu/xorg-server@2:21.1.12-1ubuntu1.9?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:21.1.7-3ubuntu2",
"2:21.1.7-3ubuntu2.1",
"2:21.1.10-1ubuntu1",
"2:21.1.11-2ubuntu1",
"2:21.1.12-1ubuntu1",
"2:21.1.12-1ubuntu1.1",
"2:21.1.12-1ubuntu1.2",
"2:21.1.12-1ubuntu1.3",
"2:21.1.12-1ubuntu1.4",
"2:21.1.12-1ubuntu1.5",
"2:21.1.12-1ubuntu1.6",
"2:21.1.12-1ubuntu1.8",
"2:21.1.12-1ubuntu1.9"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xwayland",
"binary_version": "2:23.2.6-1ubuntu0.8"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "xwayland",
"purl": "pkg:deb/ubuntu/xwayland@2:23.2.6-1ubuntu0.8?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:23.2.0-1",
"2:23.2.0-1ubuntu0.1",
"2:23.2.3-1",
"2:23.2.4-1",
"2:23.2.4-1build1",
"2:23.2.4-1build2",
"2:23.2.4-1build3",
"2:23.2.6-1",
"2:23.2.6-1ubuntu0.1",
"2:23.2.6-1ubuntu0.2",
"2:23.2.6-1ubuntu0.4",
"2:23.2.6-1ubuntu0.5",
"2:23.2.6-1ubuntu0.6",
"2:23.2.6-1ubuntu0.7",
"2:23.2.6-1ubuntu0.8"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xnest",
"binary_version": "2:21.1.24-1ubuntu1"
},
{
"binary_name": "xorg-server-source",
"binary_version": "2:21.1.24-1ubuntu1"
},
{
"binary_name": "xserver-common",
"binary_version": "2:21.1.24-1ubuntu1"
},
{
"binary_name": "xserver-xephyr",
"binary_version": "2:21.1.24-1ubuntu1"
},
{
"binary_name": "xserver-xorg-core",
"binary_version": "2:21.1.24-1ubuntu1"
},
{
"binary_name": "xserver-xorg-legacy",
"binary_version": "2:21.1.24-1ubuntu1"
},
{
"binary_name": "xvfb",
"binary_version": "2:21.1.24-1ubuntu1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.10",
"name": "xorg-server",
"purl": "pkg:deb/ubuntu/xorg-server@2:21.1.24-1ubuntu1?arch=source\u0026distro=stonking"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:21.1.22-1ubuntu1",
"2:21.1.22-1ubuntu4",
"2:21.1.24-1ubuntu1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xwayland",
"binary_version": "2:24.1.14-1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.10",
"name": "xwayland",
"purl": "pkg:deb/ubuntu/xwayland@2:24.1.14-1?arch=source\u0026distro=stonking"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:24.1.10-1",
"2:24.1.12-1",
"2:24.1.13-1",
"2:24.1.14-1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xnest",
"binary_version": "2:21.1.22-1ubuntu1.3"
},
{
"binary_name": "xorg-server-source",
"binary_version": "2:21.1.22-1ubuntu1.3"
},
{
"binary_name": "xserver-common",
"binary_version": "2:21.1.22-1ubuntu1.3"
},
{
"binary_name": "xserver-xephyr",
"binary_version": "2:21.1.22-1ubuntu1.3"
},
{
"binary_name": "xserver-xorg-core",
"binary_version": "2:21.1.22-1ubuntu1.3"
},
{
"binary_name": "xserver-xorg-legacy",
"binary_version": "2:21.1.22-1ubuntu1.3"
},
{
"binary_name": "xvfb",
"binary_version": "2:21.1.22-1ubuntu1.3"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "xorg-server",
"purl": "pkg:deb/ubuntu/xorg-server@2:21.1.22-1ubuntu1.3?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:21.1.18-1ubuntu1",
"2:21.1.21-1ubuntu1",
"2:21.1.22-1ubuntu1",
"2:21.1.22-1ubuntu1.2",
"2:21.1.22-1ubuntu1.3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "xwayland",
"binary_version": "2:24.1.10-1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "xwayland",
"purl": "pkg:deb/ubuntu/xwayland@2:24.1.10-1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:24.1.6-1ubuntu1",
"2:24.1.8-1",
"2:24.1.9-1",
"2:24.1.10-1"
]
}
],
"aliases": [],
"details": "[XKB ChangeKeycodeRange Heap Out-of-Bounds Write]",
"id": "UBUNTU-CVE-2026-93520",
"modified": "2026-10-19T20:37:08Z",
"published": "2026-10-07T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-93520"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93520"
},
{
"type": "REPORT",
"url": "https://lists.x.org/archives/xorg-announce/2026-October/003747.html"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-93520"
]
}