Is CVE-2026-93520 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-93520?

CVE-2026-93520 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-93520

Description

A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.