Vulnerabilities > CVE-2025-26594 - Use After Free vulnerability in multiple products

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
tigervnc
x-org
redhat
CWE-416
NVD
Published: 2025-02-25
Updated: 2025-04-10

Summary

A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free.

Vulnerable Configurations

Part Description Count
Application
Tigervnc
1
Application
X.Org
2
OS
Redhat
3

Common Weakness Enumeration (CWE)

References