CVE-2026-34002Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling
Updated under an hour ago ()
Does this affect you?
It affects Red Hat Enterprise Linux 10.0 Extended Update Support and 8 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.
- CVSS
- 6.1 MEDIUM (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
- Weakness (CWE)
- CWE-805
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- redhat
- NVD analysis
- Modified
- Record last updated
- Jun 7, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support redhat:enterprise_linux_eus | from 0:24.1.5-6.el10_0 not affected | CNA record |
from 0:1.1.0-25.el6_10.16 not affected | CNA record | |
from 0:1.20.10-4.el8_4 not affected | CNA record | |
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support redhat:rhel_eus_long_life | from 0:1.20.10-4.el8_4 not affected | CNA record |
from 0:21.1.3-2.el8_6.6 not affected | CNA record | |
from 0:21.1.3-2.el8_6.6 not affected | CNA record | |
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support redhat:rhel_eus | from 0:1.20.11-28.el9_4 not affected | CNA record |
Red Hat Red Hat Enterprise Linux 10 redhat:enterprise_linux | 10 | CNA record |
x.org x_server x.org:x_server | all versions | NVD |
redhat enterprise_linux redhat:enterprise_linux | 6.0; 7.0; 8.0; 9.0; 10.0 | NVD |
References
- https://access.redhat.com/errata/RHSA-2026:20547vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:20555vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:20557vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:20558vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:20560vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:20561vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:20562vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:20563vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:20575vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:20576vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:20590vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:21699vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:21712vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:21715vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:21716vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:21718vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:21741vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:21742vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:22424vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:22456vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:23254vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:23255vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:23496vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:24341vendor-advisory, x-refsource-redhat
- https://access.redhat.com/security/cve/CVE-2026-34002vdb-entry, x-refsource-redhat, third-party-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.