ZDI-CAN-28736: ZDI-26-337: X.Org Server CheckKeyTypes Buffer Overflow Privilege Escalation Vulnerability
Published Jun 9, 2026
·Updated
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-34003.
Affected Software
1 affected component
X.Org Foundation X.Org Server
Event History
Jun 9, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-28736?
ZDI-CAN-28736 has a CVSS rating of 7.8, indicating a high severity level.
2
How do I fix ZDI-CAN-28736?
To fix ZDI-CAN-28736, upgrade to the latest version of X.Org Server provided by the X.Org Foundation.
3
What type of vulnerability is ZDI-CAN-28736?
ZDI-CAN-28736 is a buffer overflow privilege escalation vulnerability.
4
Who is affected by ZDI-CAN-28736?
ZDI-CAN-28736 affects installations of X.Org Server on systems that allow local code execution.
5
Can ZDI-CAN-28736 be exploited remotely?
No, ZDI-CAN-28736 requires local access to the system to be exploited.