Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-56000
PUBLISHED
More InfoOfficial Page
Assigner-suse
Assigner Org ID-404e59f5-483d-4b8a-8e7a-e67604dd8afb
View Known Exploited Vulnerability (KEV) details
Published At-08 Jul, 2026 | 07:36
Updated At-08 Jul, 2026 | 12:42
Rejected At-
▼CVE Numbering Authority (CNA)
xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

Affected Products
Vendor
X.Org FoundationX.Org
Product
xorg-x11-server
Package Name
xorg-x11-server
Repo
https://gitlab.freedesktop.org/xorg/xserver/
Default Status
unaffected
Versions
Affected
  • From 0 before 21.1.24 (rpm)
Vendor
X.Org FoundationX.Org
Product
xwayland
Package Name
xwayland
Repo
https://gitlab.freedesktop.org/xorg/xserver/
Default Status
unaffected
Versions
Affected
  • From 0 before 24.1.13 (rpmver)
Problem Types
TypeCWE IDDescription
CWECWE-416CWE-416 Use after free
Type: CWE
CWE ID: CWE-416
Description: CWE-416 Use after free
Metrics
VersionBase scoreBase severityVector
4.09.0CRITICAL
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Version: 4.0
Base score: 9.0
Base severity: CRITICAL
Vector:
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-234CAPEC-234 Hijacking a privileged process
CAPEC ID: CAPEC-234
Description: CAPEC-234 Hijacking a privileged process
Solutions
Configurations
Workarounds
Exploits
Credits
finder
Anonymous working with Trend Micro Zero Day Initiative.
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://gitlab.freedesktop.org/xorg/xserver/-/commit/2779affbdb4354e894f490e56f962527d6125043
patch
https://www.openwall.com/lists/oss-security/2026/07/08/2
vendor-advisory
Hyperlink: https://gitlab.freedesktop.org/xorg/xserver/-/commit/2779affbdb4354e894f490e56f962527d6125043
Resource:
patch
Hyperlink: https://www.openwall.com/lists/oss-security/2026/07/08/2
Resource:
vendor-advisory
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found