ZDI-CAN-31830: ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-93515.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Affected X.Org Server installations are exposed to local attackers who can run low-privileged code on the system. The issue is an information disclosure vulnerability, not a remotely exploitable condition based on the available information.
What access does an attacker need to exploit it?
An attacker must first be able to execute low-privileged code on the target system. The provided information does not indicate that administrative privileges or network access are required.
What is the assigned severity?
ZDI assigned this issue a CVSS score of 5.5. It is tracked as CVE-2026-93515.