It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3443 advisory.

    A bounds-checking flaw in the X.Org Server's XvShmPutImage handling can result in an out-of-bounds read or     write, potentially leading to server crashes or memory corruption. (CVE-2026-109092)

    A flaw in the X.Org Server's XTestFakeInput handling can result in a stack out-of-bounds write,     potentially leading to server crashes or stack memory corruption. (CVE-2026-109093)

    An integer overflow flaw in the X.Org Server's glamor Xv image size computation can result in out-of-     bounds reads, potentially leading to server crashes or unintended memory access. (CVE-2026-109095)

    A flaw in the X.Org Server's XvPutImage length validation can allow requests with missing image data to be     processed, potentially leading to server crashes or misbehavior. (CVE-2026-109096)

    A flaw in the X.Org Server's XvQueryImageAttributes reply handling can result in clients receiving an     incorrect data size value, potentially leading to improper buffer allocation or usage. (CVE-2026-109903)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f7fbdf5649 advisory.

    Update to xserver 21.1.26     CVE fix for:
    CVE-2026-109091, CVE-2026-109092, CVE-2026-109093, CVE-2026-109904,     CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22274-1 advisory.

    - CVE-2026-88812: XKB SetGeometry TextDoodad double rree (bsc#1281213).
    - CVE-2026-93515: X.Org Server present extension use-after-free (bsc#1281218).
    - CVE-2026-93516: X.Org Server XInput passive grab use-after-free (bsc#1281220).
    - CVE-2026-93517: GLX RenderLarge heap buffer overflow (bsc#1281225).
    - CVE-2026-93518: XKB ResizeKeyType numeric truncation (bsc#1281227).
    - CVE-2026-93519: XFixes pointer barrier event list buffer overflow (bsc#1281233).
    - CVE-2026-93520: XKB ChangeKeycodeRange heap out-of-bounds write (bsc#1281236).
    - CVE-2026-93521: RandR ChangeProviderProperty heap buffer overflow (bsc#1281238).
    - CVE-2026-93523: XInput2 PassiveUngrabDevice out-of-bounds write (bsc#1281241).
    - CVE-2026-93524: XKB SetMap key width/action count desync out-of-bounds read (bsc#1281242).
    - CVE-2026-93536: GestureBuildSprite use-after-free (bsc#1281244).
    - CVE-2026-109092: X.Org Server XvShmPutImage shared-memory bounds overflow (bsc#1285087).
    - CVE-2026-109093: X.Org Server XTestFakeInput valuator stack out-of-bounds write (bsc#1285088).
    - CVE-2026-109094: X.Org Server XRes QueryResourceBytes swap path size overflow (bsc#1285089).
    - CVE-2026-109095: X.Org Server Glamor Xv image size integer overflow (bsc#1285090).
    - CVE-2026-109096: X.Org Server XvPutImage negative image size length bypass (bsc#1285091).
    - CVE-2026-109903: X.Org Server XvQueryImageAttributes negative size reply (bsc#1285093).
    - CVE-2026-109904: X.Org Server XRes QueryClientIds request size overflow (bsc#1285094).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-68c1586ac2 advisory.

    Update to xserver 21.1.26     CVE fix for:
    CVE-2026-109091, CVE-2026-109092, CVE-2026-109093, CVE-2026-109904,     CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Incorrect handling of negative returns from ddQueryImageAttributes() when processing XvPutImage requests     in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by authenticated X clients to     crash the X server. (CVE-2026-109096)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of xorg-server installed on the remote host is prior to 1.20.14 / 21.1.26 / 21.1.4 / 24.1.15. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-314-01 advisory.

    New xorg-server packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the xorg-server security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3444 advisory.

    A flaw in the X.Org Server's handling of EDID Display-Range descriptors can result in an out-of-bounds     write, potentially leading to server crashes or memory corruption. (CVE-2026-109091)

    A bounds-checking flaw in the X.Org Server's XvShmPutImage handling can result in an out-of-bounds read or     write, potentially leading to server crashes or memory corruption. (CVE-2026-109092)

    A flaw in the X.Org Server's XTestFakeInput handling can result in a stack out-of-bounds write,     potentially leading to server crashes or stack memory corruption. (CVE-2026-109093)

    An integer overflow flaw in the X.Org Server's glamor Xv image size computation can result in out-of-     bounds reads, potentially leading to server crashes or unintended memory access. (CVE-2026-109095)

    A flaw in the X.Org Server's XvPutImage length validation can allow requests with missing image data to be     processed, potentially leading to server crashes or misbehavior. (CVE-2026-109096)

    A flaw in the X.Org Server's XvQueryImageAttributes reply handling can result in clients receiving an     incorrect data size value, potentially leading to improper buffer allocation or usage. (CVE-2026-109903)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4108 advisory.

    A flaw in the X.Org Server's handling of EDID Display-Range descriptors can result in an out-of-bounds     write, potentially leading to server crashes or memory corruption. (CVE-2026-109091)

    A bounds-checking flaw in the X.Org Server's XvShmPutImage handling can result in an out-of-bounds read or     write, potentially leading to server crashes or memory corruption. (CVE-2026-109092)

    A flaw in the X.Org Server's XTestFakeInput handling can result in a stack out-of-bounds write,     potentially leading to server crashes or stack memory corruption. (CVE-2026-109093)

    An integer overflow flaw in the X.Org Server's glamor Xv image size computation can result in out-of-     bounds reads, potentially leading to server crashes or unintended memory access. (CVE-2026-109095)

    A flaw in the X.Org Server's XvPutImage length validation can allow requests with missing image data to be     processed, potentially leading to server crashes or misbehavior. (CVE-2026-109096)

    A flaw in the X.Org Server's XvQueryImageAttributes reply handling can result in clients receiving an     incorrect data size value, potentially leading to improper buffer allocation or usage. (CVE-2026-109903)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5b2d4ebfde advisory.

    Update to xwayland 24.1.15     CVE fix for:
    CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094,     CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f8802557-dea7-11f1-bf46-901b0e13f1a0 advisory.

    X.Org reports:

                CVE-2026-109091: X.Org Server EDID DS_RANGES Out-Of-Bounds Write                 CVE-2026-109092: X.Org Server XvShmPutImage Shared-Memory Bounds Overflow                 CVE-2026-109093: X.Org Server XTestFakeInput Valuator Stack Out-Of-Bounds Write                 CVE-2026-109094: X.Org Server XRes QueryResourceBytes Swap Path Size Overflow                 CVE-2026-109095: X.Org Server glamor Xv Image Size Integer Overflow                 CVE-2026-109096: X.Org Server XvPutImage Negative Image Size Length Bypass                 CVE-2026-109903: X.Org Server XvQueryImageAttributes Negative Size Reply                 CVE-2026-109904: X.Org Server XRes QueryClientIds Request Size Overflow


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7defd115fa advisory.

    Update to xserver 21.1.26     CVE fix for:
    CVE-2026-109091, CVE-2026-109092, CVE-2026-109093, CVE-2026-109904,     CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of tigervnc installed on the remote host is prior to 1.16.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-315-01 advisory.

    New tigervnc packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the tigervnc security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5180-1 advisory.

    - CVE-2026-109091: X.Org Server EDID DS_RANGES Out-Of-Bounds Write (bsc#1285086).
    - CVE-2026-109092: X.Org Server XvShmPutImage Shared-Memory Bounds Overflow (bsc#1285087).
    - CVE-2026-109093: X.Org Server XTestFakeInput Valuator Stack Out-Of-Bounds Write (bsc#1285088).
    - CVE-2026-109094: X.Org Server XRes QueryResourceBytes Swap Path Size Overflow (bsc#1285089).
    - CVE-2026-109095: X.Org Server glamor Xv Image Size Integer Overflow (bsc#1285090).
    - CVE-2026-109096: X.Org Server XvPutImage Negative Image Size Length Bypass (bsc#1285091).
    - CVE-2026-109903: X.Org Server XvQueryImageAttributes Negative Size Reply (bsc#1285093).
    - CVE-2026-109904: X.Org Server XRes QueryClientIds Request Size Overflow (bsc#1285094).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
379845	Amazon Linux 2023 : xorg-x11-server-Xwayland, xorg-x11-server-Xwayland-devel (ALAS2023-2026-3443)	Nessus	Amazon Linux Local Security Checks	2026/11/12	2026/11/12	high
379975	Fedora 45 : xorg-x11-server (2026-f7fbdf5649)	Nessus	Fedora Local Security Checks	2026/11/13	2026/11/13	high
381199	openSUSE 16: xorg-x11-server / xorg-x11-server-Xvfb / xorg-x11-server-extra / etc (openSUSE-SU-2026:22274-1)	Nessus	SuSE Local Security Checks	2026/11/14	2026/11/14	high
380965	Fedora 43 : xorg-x11-server (2026-68c1586ac2)	Nessus	Fedora Local Security Checks	2026/11/14	2026/11/14	high
378582	Linux Distros Unpatched Vulnerability : CVE-2026-109096	Nessus	Misc.	2026/11/10	2026/11/14	medium
378705	Slackware Linux 15.0 / current xorg-server Multiple Vulnerabilities (SSA:2026-314-01)	Nessus	Slackware Local Security Checks	2026/11/11	2026/11/11	critical
379850	Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2026-3444)	Nessus	Amazon Linux Local Security Checks	2026/11/12	2026/11/12	high
379888	Amazon Linux 2 : xorg-x11-server (ALAS-2026-4108)	Nessus	Amazon Linux Local Security Checks	2026/11/12	2026/11/12	high
379558	Fedora 45 : xorg-x11-server-Xwayland (2026-5b2d4ebfde)	Nessus	Fedora Local Security Checks	2026/11/12	2026/11/12	high
380182	FreeBSD : X.Org X server and Xwayland -- Multiple vulnerabilities (f8802557-dea7-11f1-bf46-901b0e13f1a0)	Nessus	FreeBSD Local Security Checks	2026/11/13	2026/11/13	high
381207	Fedora 44 : xorg-x11-server (2026-7defd115fa)	Nessus	Fedora Local Security Checks	2026/11/14	2026/11/14	high
379265	Slackware Linux 15.0 / current tigervnc Multiple Vulnerabilities (SSA:2026-315-01)	Nessus	Slackware Local Security Checks	2026/11/11	2026/11/11	critical
379498	SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2026:5180-1)	Nessus	SuSE Local Security Checks	2026/11/12	2026/11/12	high

偵測

搜尋 Plugin

high

high

high

high

medium

critical

high

high

high

high

high

critical

high