CVE-2025-26594 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, th…
High CVSS: 7.8

CVE-2025-26594

A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free.
Vendor
Tigervnc
Product
Tigervnc
CWE
CWE-416
Yayın Tarihi
2025-02-25 16:15:38
Güncelleme
2026-04-06 13:17:13
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

CWE-416 Tigervnc HIGH Tigervnc 2025

Referanslar

https://access.redhat.com/errata/RHSA-2025:2500 https://access.redhat.com/errata/RHSA-2025:2502 https://access.redhat.com/errata/RHSA-2025:2861 https://access.redhat.com/errata/RHSA-2025:2862 https://access.redhat.com/errata/RHSA-2025:2865 https://access.redhat.com/errata/RHSA-2025:2866 https://access.redhat.com/errata/RHSA-2025:2873 https://access.redhat.com/errata/RHSA-2025:2874 https://access.redhat.com/errata/RHSA-2025:2875 https://access.redhat.com/errata/RHSA-2025:2879 https://access.redhat.com/errata/RHSA-2025:2880 https://access.redhat.com/errata/RHSA-2025:3976 https://access.redhat.com/errata/RHSA-2025:7163 https://access.redhat.com/errata/RHSA-2025:7165 https://access.redhat.com/errata/RHSA-2025:7458 https://access.redhat.com/security/cve/CVE-2025-26594 https://bugzilla.redhat.com/show_bug.cgi?id=2345248 https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html