Red Hat Security Advisory RHSA-2026:23254: Fixes multiple CVEs in X.Org X server and TigerVNC

Vulnerability Overview Vulnerability ID: RHSA-2026:23254 Publication Date: 2026-06-04 Update Date: 2026-06-04 Severity: Important CVSS Score: Specific numeric value not provided, but classified as “Important” Scope of Impact Affected Systems: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Affected Components: tigervnc Vulnerability Types: - xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) - xwayland: xorg X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing (CVE-2026-34000) - xwayland: xorg X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) - xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling (CVE-2026-34002) - xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) - TigerVNC: x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34004) Remediation Mitigation: Security updates are provided; users are advised to apply this update as soon as possible to address the aforementioned vulnerabilities. References: CVE links for each vulnerability can be found in the References section. Additional Information Description: TigerVNC is a remote display system that allows users to view computing desktop environments not only on the machine running the system but also over the Internet across various machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fixes: Multiple security fixes have been provided, affecting various components of the X.Org X server and TigerVNC. POC Code or Exploitation Code No specific POC code or exploitation code is provided on the page.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat Security Advisory RHSA-2026:23254: Fixes multiple CVEs in X.Org X server and TigerVNC

More from this source