Xorg — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
December 12, 2025
Last Seen
February 8, 2026

Xorg is a technology platform tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed December 12, 2025; most recent activity February 8, 2026.

Overview

Xorg is the X.Org Server (X11) platform that provides the graphical display server for Unix-like systems, including the xwayland compatibility layer. A recent CVE note highlights CVE-2025-49176, a vulnerability in the big-requests extension affecting the xorg-x11-server/xwayland/tigervnc stack, indicating a security risk in remote graphical components exposed via VNC. This expands the attack surface of Xorg-based environments and is relevant for defenders managing graphical session exposure.

Related Threat Clusters

Recent Intelligence Reports

  • Fedora 43 xorgxrdp Important Stack Buffer Overflow 2026 — Linuxsecurity · February 8, 2026
  • CVE-2025-49176 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension — Api.Msrc.Microsoft · December 12, 2025

CVSS v3.1 Breakdown