CVE-2026-88807CWE-122
CVE-2026-88807
published September 21, 2026
What it is
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.
The record
Technical detail
- CVSS
- 8.9 · NONE
- CVSS v4.0
- 8.9 · CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- EPSS
- 0.00260 · 16.8th percentile
- Weakness
- CWE-122 · Heap-based Buffer Overflow
- Published
- 2026-09-21T18:17Z
References (1)
EPSS history
Timeline