Skip to content
Eight New Security Vulnerabilities Disclosed for X.Org Server and XWayland

Eight New Security Vulnerabilities Disclosed for X.Org Server and XWayland

First seen 10 Nov 2026, 16:20 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 16:21 UTC
  • •Eight new vulnerabilities disclosed for X.Org Server and XWayland.
  • •Critical issues include out-of-bounds writes and shared-memory overflows.
  • •Users should update to xorg-server-21.1.26 and xwayland-24.1.15 to mitigate risks.

On November 10, 2026, eight new security vulnerabilities were disclosed for the X.Org Server and XWayland, affecting various components of the software. The vulnerabilities include CVE-2026-109091, an out-of-bounds write issue, and CVE-2026-109092, which allows for shared-memory bounds overflow. These vulnerabilities could lead to server crashes or memory corruption if exploited. The issues were identified by security researchers and have been addressed in the latest versions: xorg-server-21.1.26 and xwayland-24.1.15. Users are urged to update their systems to mitigate potential risks. The vulnerabilities are part of a growing list of security issues affecting the X.Org Server over the past decade.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2026-11-10
Eight vulnerabilities disclosed
Eight new security vulnerabilities affecting X.Org Server and XWayland were made public, prompting urgent updates.
Phoronix
2026-11-10
Patches released
The vulnerabilities were fixed in xorg-server-21.1.26 and xwayland-24.1.15, released on the same day.
lists.x.org

More articles in this cluster (2)

Following this threat?

Track CVE-2026-109091 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (13)

1 / 3

Common questions

Which versions are affected?
The vulnerabilities affect versions prior to xorg-server-21.1.26 and xwayland-24.1.15.
What should I do to protect my systems?
Update to xorg-server-21.1.26 and xwayland-24.1.15 as soon as possible.
Are these vulnerabilities actively exploited?
No active exploitation has been reported; the vulnerabilities are disclosed and patched.