Ghostwire

CVE-2026-34003: A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially...

HIGH CVSS 7.5

Published: April 23, 2026 | Last Modified: April 23, 2026

Description

A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (2 articles)

References