BaselineWatch
Desk

CVE-2026-33999

7.8 high SSVC exploitation: none Awaiting Analysis

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 1

  1. First seenCVSS 7.8NVD modified 2026-10-26 21:10

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 75