PT-2026-46943

CVE-2026-50263

·

Published

2026-04-20

·

Updated

2026-10-22

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions X.Org X server (affected versions not specified) Xwayland (affected versions not specified)
Description A use-after-free flaw exists in the CreateSaverWindow() function. A client can trigger a use-after-free read by changing window attributes and forcing the screen saver, which may result in information disclosure. Use-after-free is a condition where a program continues to use a pointer after it has been freed, potentially allowing access to memory that has been repurposed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2026:26562
ALSA-2026:26566
ALSA-2026:26590
ALSA-2026:26610
ALSA-2026:26709
ALSA-2026:28923
ALSA-2026:29844
AZL-89534
AZL-89589
CLSA-2026-1782224017
CLSA-2026-1782484404
CLSA-2026-1782812906
CLSA-2026-1783338681
CLSA-2026-1790583885
CLSA-2026-1790584501
CLSA-2026-1790585169
CLSA-2026-1790608489
CLSA-2026-1791120339
ECHO-4456-5962-A3CB
OESA-2026-2681
OESA-2026-4480
OESA-2026-4481
OESA-2026-4482
OESA-2026-4483
RHSA-2026:46377
RHSA-2026:46382
RHSA-2026:46385
RHSA-2026:46392
RHSA-2026:46456
RHSA-2026:46460
RHSA-2026:46473
ZDI-26-397
Found an issue in the description? Have something to add? Feel free to write us 👾