Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-56000

37
FAUCET Score

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.

First published: Jul 8, 2026Last modified: Jul 8, 2026

Impacted Technologies

VendorProductVersion(s)CPE
< 21.2.24CPE matchmatch criteria
cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*
< 24.1.13CPE matchmatch criteria
cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

9.0CRITICAL

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
VS Confidentiality
HIGH
VS Integrity
HIGH
VS Availability
HIGH
SS Confidentiality
HIGH
SS Integrity
HIGH
SS Availability
HIGH
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.22%
Probability of exploitation in next 30 days
EPSS Percentile
12.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0022 is in the 43rd percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

microsoftpatch availablevia msrc
Product: azl3 xorg-x11-server-Xwayland 24.1.12-1 on Azure Linux 3.0Fixed in: 24.1.13-1
microsoftpatch availablevia msrc
Product: 21578-17084Fixed in: 24.1.13-1

Vendor Advisories (1)

microsoft2026-Jul/CVE-2026-56000Critical

xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

Jul 2, 2026

References

gitlab.freedesktop.org / xorg/xserver/-/commit/2779affbdb4354e894f490e56f962527d6125043
Patch
openwall.com / lists/oss-security/2026/07/08/2
Mailing ListPatchThird Party Advisory