VULNERABILITY INTELLIGENCE
CVE-2026-33999
CVSS score7.8 HIGH
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-04-23
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.
Weakness classification
- secalert@redhat.com: CWE-191
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-191