Vulnerabilities > CVE-2025-26600 - Use After Free vulnerability in multiple products

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
tigervnc
x-org
redhat
CWE-416
NVD
Published: 2025-02-25
Updated: 2025-04-10

Summary

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free.

Vulnerable Configurations

Part Description Count
Application
Tigervnc
1
Application
X.Org
2
OS
Redhat
3

Common Weakness Enumeration (CWE)

References