Xorg Server
Vendor:
First CVE: Aug 30, 2006 · Active for 19 years
3
Total CVEs
More Total CVEs than 64% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
5.0
Avg CVSS
Higher Avg CVSS than 9% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Xorg Server over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 30, 2006
19 years ago
Most Recent CVE
Jul 1, 2015
4,042 days ago
CVE Severity & Scoring
Xorg Server3 CVEs
33%
33%
33%
All CVEs352,427 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown3 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown3 (100.0%)
User Interaction
None0 (0.0%)
Unknown3 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown3 (100.0%)
Top CVEs
Signals from CVEs in this product scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-4447HIGH X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges | Aug 30, 2006 | 7.2 | 18 | NO | NO |
CVE-2007-4730MEDIUM Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying | Sep 11, 2007 | 4.3 | 14 | NO | NO |
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbi | Jul 1, 2015 | 3.6 | 13 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (3 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (3 CVEs).
Media Mentions
Signals from CVEs in this product scope (3 CVEs).
Top CNAs Publishing CVEs For Xorg Server
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.3 | 1 | 4.3 | 0.5% | 0 | 0 |
| 1.2 | 1 | 4.3 | 0.5% | 0 | 0 |
| 1.17.1 | 1 | 3.6 | 0.4% | 0 | 0 |
| 1.16.99.902 | 1 | 3.6 | 0.4% | 0 | 0 |
| 1.16.99.901 | 1 | 3.6 | 0.4% | 0 | 0 |
| 1.16.4 | 1 | 3.6 | 0.4% | 0 | 0 |
| 1.1 | 1 | 4.3 | 0.5% | 0 | 0 |
| 1.02_r5 | 1 | 7.2 | 0.4% | 0 | 0 |
| 1.02 | 1 | 4.3 | 0.5% | 0 | 0 |
| 1.01 | 1 | 4.3 | 0.5% | 0 | 0 |