ZDI-CAN-28593 HIGH 7.8 Overdue Dec 18, 2025

X.Org

X.Org is the open-source organization responsible for the X Window System, the fundamental display server used in most Linux and Unix environments. This vulnerability has a CVSS score of 7.8 (HIGH) and requires local access with low-privilege user authentication to exploit, but once successful, it grants an attacker high-level compromises to confidentiality, integrity, and availability with no user interaction needed. Security teams should prioritize patching X.Org systems after the April 17, 2026 vendor deadline and monitor for any suspicious local privilege escalation attempts on systems still running vulnerable versions.

Advisory Details
Researcher Discovered by: Jan-Niklas Sohn
Reported December 18, 2025
Deadline April 17, 2026 3d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy