ZDI-CAN-31941: ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability
Published Oct 15, 2026
·Updated
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93520.
Affected Software
1 affected component
X.Org X.Org Server
Event History
Oct 15, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must already be able to execute low-privileged code on the affected system. The issue is therefore relevant to systems where untrusted or less-trusted local users or processes can run code.
2
What is the likely impact of successful exploitation?
Successful exploitation allows a local attacker to escalate privileges on an affected X.Org Server installation.
3
Which CVE tracks this vulnerability?
This vulnerability is assigned CVE-2026-93520.