azure linux libX11 vulnerabilities

Latest azure linux libX11 CVEs

Newest publication first

1. CVE-2026-94285 Out-of-bounds read in libX11's byte-oriented codeset parser

   Published 2026-09-28

   Medium·CVSS 5.1 EPSS 0.15%

   An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

2. CVE-2026-94284 Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser

   Published 2026-09-28

   Medium·CVSS 5.5 EPSS 0.13%

   An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

3. CVE-2026-94283 Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser

   Published 2026-09-28

   Medium·CVSS 6.5 EPSS 0.21%

   An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

4. CVE-2026-88806 libX11 XkbGetMap Reply Heap-based Buffer Overflow

   Published 2026-09-21

   High·CVSS 7.5 EPSS 0.20%

   A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.