Fiche vulnérabilité
CVE-2025-26594 : faille élevée tigervnc tigervnc (CVSS 7.8)
Description
A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free.
En bref
- Sévérité
- Élevée (CVSS 7.8)
- Vecteur CVSS
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 25 févr. 2025
- Dernière mise à jour
- 29 juin 2026
Produits concernés
- tigervnc tigervnc
- x.org x server
- x.org xwayland
- redhat enterprise linux
Références
- Fiche CVE-2025-26594 sur le NVD (NIST)
- access.redhat.com/errata/RHSA-2025:2500
- access.redhat.com/errata/RHSA-2025:2502
- access.redhat.com/errata/RHSA-2025:2861
- access.redhat.com/errata/RHSA-2025:2862
- access.redhat.com/errata/RHSA-2025:2865
- access.redhat.com/errata/RHSA-2025:2866
- access.redhat.com/errata/RHSA-2025:2873
- access.redhat.com/errata/RHSA-2025:2874
- access.redhat.com/errata/RHSA-2025:2875
- access.redhat.com/errata/RHSA-2025:2879
- access.redhat.com/errata/RHSA-2025:2880
- access.redhat.com/errata/RHSA-2025:3976
- access.redhat.com/errata/RHSA-2025:7163
- access.redhat.com/errata/RHSA-2025:7165
- access.redhat.com/errata/RHSA-2025:7458