← Database

CVE-2026-50263

MEDIUM CVSS: 5.5 Published: 2026-06-05 Modified: 2026-08-05

Description

A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.

Affected Platforms

Redhat Enterprise LinuxX.Org X ServerX.Org Xwayland

Weakness Type

CWE-416

References