CVE-2026-93515

CVSS 6.8 (medium) · published 2026-10-28

A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malicious X clients to crash or potentially execute code in the X server context.

Weakness: CWE-416

Source: NVD CVE-2026-93515

References

• https://gitlab.freedesktop.org/xorg/xserver/-/commit/1b6955c3108e6b43433aefe860070708e6f43d1b

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.