Is CVE-2026-94282 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-94282?

CVE-2026-94282 has a CVSS v3 severity of MEDIUM (5.6).

Back

CVE-2026-94282

Description

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client.