The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-922a6d4e1a advisory.

    Update to xwayland 24.1.10, CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,     CVE-2026-34002, CVE-2026-34003

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0b633ecc7c advisory.

    Update to xserver 21.1.22, CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,     CVE-2026-34003

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:24341 advisory.

    Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop     environment not only on the machine where it is running, but from anywhere on the Internet and from a wide     variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

    Security Fix(es):

    * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map     handling (CVE-2026-33999)

    * xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in     XKB geometry processing. (CVE-2026-34000)

    * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory     corruption (CVE-2026-34001)

    * xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in     XKB modifier map handling (CVE-2026-34002)

    * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory     access (CVE-2026-34003)

    * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of     service via incorrect permissions (CVE-2026-34352)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19342 advisory.

    - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,       CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities       Resolves: RHEL-163213       Resolves: RHEL-163281       Resolves: RHEL-163267
    - Fix CVE-2026-34352       Resolves: RHEL-167986
    - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation       Resolves: RHEL-119989
    - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal       Resolves: RHEL-120009

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1212:08 advisory.

    * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map     handling (CVE-2026-33999)
      * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential     memory corruption (CVE-2026-34001)
      * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory     access (CVE-2026-34003)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ad10afa9cd advisory.

    Fixes CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261     CVE-2026-50262 CVE-2026-50263 CVE-2026-50264.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4738 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4738-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                     Arnaud Rebillout     August 13, 2026                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : xorg-server     Version        : 2:1.20.11-1+deb11u18     CVE ID         : CVE-2022-49737 CVE-2026-33999 CVE-2026-34000 CVE-2026-34001                      CVE-2026-34002 CVE-2026-34003 CVE-2026-50256 CVE-2026-50257                      CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261                      CVE-2026-50262 CVE-2026-50263 CVE-2026-50264     Debian Bug     : 1081338 1138680

    Several vulnerabilities were discovered in the Xorg X server, which may     result in privilege escalation if the X server is running privileged.

    CVE-2022-49737

        In X.Org X server 20.11 through 21.1.16, when a client application         uses easystroke for mouse gestures, the main thread modifies various         data structures used by the input thread without acquiring a lock,         aka a race condition. In particular, AttachDevice in dix/devices.c         does not acquire an input lock.

    CVE-2026-33999

        A flaw was found in the X.Org X server. This integer underflow         vulnerability, specifically in the XKB compatibility map handling,         allows an attacker with local or remote X11 server access to trigger         a buffer read overrun. This can lead to memory-safety violations and         potentially a denial of service (DoS) or other severe impacts.

    CVE-2026-34000

        A flaw was found in the X.Org X server. This out-of-bounds read         vulnerability in the XKB geometry processing, specifically within the         `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an         attacker to read uninitialized or out-of-bounds memory. An attacker         with a connection to the X11 server, either locally or remotely, can         exploit this without user interaction. This could lead to the         disclosure of memory contents or cause a denial of service by         crashing the server.  Source

    CVE-2026-34001

        A flaw was found in the X.Org X server. This use-after-free         vulnerability occurs in the XSYNC fence triggering logic,         specifically within the miSyncTriggerFence() function. An attacker         with access to the X11 server can exploit this without user         interaction, leading to a server crash and potentially enabling         memory corruption. This could result in a denial of service or         further compromise of the system.

    CVE-2026-34002

        A flaw was found in the X.Org X server. This vulnerability, an         out-of-bounds read, affects the XKB (X Keyboard Extension) modifier         map handling. An attacker with access to the X11 server can exploit         this by sending a malformed request, which causes the server to read         beyond its intended memory boundaries. This can lead to the exposure         of sensitive information or cause the server to crash, resulting in a         denial of service.

    CVE-2026-34003

        A flaw was found in the X.Org X server's XKB key types request         validation. A local attacker could send a specially crafted request         to the X server, leading to an out-of-bounds memory access         vulnerability. This could result in the disclosure of sensitive         information or cause the server to crash, leading to a Denial of         Service (DoS). In certain configurations, higher impact outcomes may         be possible.

    CVE-2026-50256

        A stack-based buffer overflow flaw was found in the X.Org X server         and Xwayland. A mismatch between the X server and the libXfont2         library's maximum font name length can cause a stack buffer overflow         during font alias resolution. The server allocates a 256 byte stack         buffer but libXfont2's alias target name length is 1024 bytes. A font         alias name between 257 and 1023 bytes causes the X server to copy         that name into the undersized stack buffer without further checks.
        This may be used to crash the server, or for privilege escalation if         the X server runs as root.

    CVE-2026-50257

        A use-after-free flaw was found in the X.Org X server and Xwayland in         miSyncDestroyFence(). A client that sets up multiple fence triggers         can trigger a use-after-free function pointer call. An attacker would         connect to the X server to set up a fence and await that fence, then         a second X connection destroys the fence, causing the use-after-free.
        This may be used to crash the server, or for privilege escalation if         the X server runs as root.

    CVE-2026-50258

        A stack-based buffer overflow flaw was found in the X.Org X server         and Xwayland. The X server has multiple stack buffers sized         XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not         verify or clamp non-canonical key types to XkbMaxShiftLevel. A client         can change key types to excessive shift levels and trigger stack         overflows. This is caused by an incomplete fix of CVE-2025-26597.
        This may be used to crash the server, or for privilege escalation if         the X server runs as root.

    CVE-2026-50259

        A stack-based buffer overflow flaw was found in the X.Org X server         and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer         mapWidths[256] indexed by key type index. The helper function         CheckKeyTypes() writes to this buffer at a client-controlled offset,         allowing a stack buffer overflow. This may be used to crash the         server, or for privilege escalation if the X server runs as root.

    CVE-2026-50260

        A use-after-free flaw was found in the X.Org X server and Xwayland in         FreeCounter(). A client that sets up multiple SyncCounters and awaits         on those triggers can trigger a use-after-free when destroying those         counters via a second client connection. This may be used to crash         the server, or for privilege escalation if the X server runs as root.

    CVE-2026-50261

        A use-after-free flaw was found in the X.Org X server and Xwayland in         SyncChangeCounter(). A client that sets up multiple SyncCounters can         trigger a use-after-free when destroying those counters via a second         client connection while changing those counters. This may be used to         crash the server, or for privilege escalation if the X server runs as         root.

    CVE-2026-50262

        An out-of-bounds read flaw was found in the X.Org X server and         Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size         validation check can read a client-controlled number of bytes,         exceeding the request buffer, leading to information disclosure. A         write path also exists but requires byte-swapped clients which is         disabled by default.

    CVE-2026-50263

        A use-after-free flaw was found in the X.Org X server and Xwayland in         CreateSaverWindow(). A client can trigger a use-after-free read after         changing window attributes and forcing the screen saver, leading to         information disclosure.

    CVE-2026-50264

        An out-of-bounds write flaw was found in the X.Org X server and         Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that         requests multiple DRI2BufferBackLeft attachments and one         DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may         be used to crash the server, or for privilege escalation if the X         server runs as root.

    For Debian 12 bullseye, these problems have been fixed in version     2:1.20.11-1+deb11u18.

    We recommend that you upgrade your xorg-server packages.

    For the detailed security status of xorg-server please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/xorg-server

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
310211	Fedora 44 : xorg-x11-server-Xwayland (2026-922a6d4e1a)	Nessus	Fedora Local Security Checks	2026/4/25	2026/5/8	critical
310423	Fedora 42 : tigervnc (2026-0b633ecc7c)	Nessus	Fedora Local Security Checks	2026/4/27	2026/5/8	critical
319650	RHEL 8 : tigervnc (RHSA-2026:24341)	Nessus	Red Hat Local Security Checks	2026/6/8	2026/6/8	critical
322345	Oracle Linux 9 : tigervnc (ELSA-2026-19342)	Nessus	Oracle Linux Local Security Checks	2026/6/24	2026/6/24	critical
325450	MiracleLinux 9 : xorg-x11-server-1.20.11-34.el9_8 (AXSA:2026-1212:08)	Nessus	Miracle Linux Local Security Checks	2026/7/7	2026/7/7	high
323128	Fedora 43 : tigervnc (2026-ad10afa9cd)	Nessus	Fedora Local Security Checks	2026/6/26	2026/6/26	critical
335006	Debian dla-4738 : xdmx - security update	Nessus	Debian Local Security Checks	2026/8/13	2026/8/13	critical

检测

插件搜索

critical

critical

critical

critical

high

critical

critical