Vulnerabilities CVE-2026-50261

CVE-2026-50261

High

Open

TLP:CLEAR

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a second client connection while changing those counters. This may be used to crash the server, or for privilege escalation if the X server runs as root.

Details

CVSS Score: 7.8
EPSS Score ⓘ: 0.15%

5.1th percentile
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Jun 5, 2026
Last Modified: Aug 4, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.