ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93519.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running affected X.Org Server installations are exposed when an attacker can execute low-privileged code locally on the target.
Can this be exploited remotely without prior access?
The available information describes this as a local privilege-escalation issue and requires the attacker to first obtain the ability to execute low-privileged code on the target system.
What level of access could an attacker gain?
A successful exploit allows a local attacker to escalate privileges. The provided information does not specify the resulting privilege level.