The official CVE record is not published yet
Listed from a security news or mailing-list post. Details may change. It will be replaced with the CVE.org / NVD record once published.
ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability
Summary
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The...
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-93516 xorg-server
- Ubuntu UBUNTU-CVE-2026-93516 xorg-server
Original description The description as published by the source.
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-93516.
(Zero Day Initiative Published Advisories: ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability)
Source: Zero Day Initiative Published Advisories NVD