ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93520.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Affected X.Org Server installations are exposed when an attacker can already execute low-privileged code locally on the target system. It is a local privilege-escalation issue, not one described as remotely exploitable.
What does an attacker need to exploit it?
The attacker must first obtain the ability to execute low-privileged code on the target system. The provided information does not identify any additional prerequisites or configuration requirements.
How severe is the issue?
ZDI assigned this vulnerability a CVSS rating of 7.8. The issue is tracked as CVE-2026-93520.