CVE-2026-109093 | X.Org xwayland/xorg-x11-server DeviceValuator ProcXTestFakeInput stack-based overflow

November 13, 2026 Yanac

A vulnerability was found in X.Org xwayland and xorg-x11-server. It has been classified as very critical. Impacted is the function ProcXTestFakeInput of the component DeviceValuator. The manipulation leads to stack-based buffer overflow.

This vulnerability is uniquely identified as CVE-2026-109093. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More