CVE-2026-50263

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 5.5EPSS <1%

Published 2026-06-05Updated 2026-06-05

Media 626

Vulnerability details

A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CNAredhat

EPSS score history

Sources

4 links

PoC links are not available for guest users. Login to view them.

CVEShield RedHat Vuln DB CVE Organization NVD Analysis

Profile

CVSS

5.5

EPSS

<1%

Published

2026-06-05

Updated

2026-06-05

CNA

redhat

Vendors

Red Hat

5 products

CPEs

cpe:/o:redhat:enterprise_linux:10

cpe:/o:redhat:enterprise_linux:6

cpe:/o:redhat:enterprise_linux:7

cpe:/o:redhat:enterprise_linux:8

cpe:/o:redhat:enterprise_linux:9

cpe:/a:redhat:enterprise_linux:8::appstream

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/a:redhat:enterprise_linux:9::crb

cpe:/a:redhat:enterprise_linux:8::crb

cpe:/o:redhat:enterprise_linux:10.2

cpe:/a:redhat:rhel_e4s:9.2::appstream

cpe:/o:redhat:rhel_els:7

cpe:/a:redhat:rhel_e4s:9.4::appstream

cpe:/a:redhat:rhel_eus:9.6::appstream

cpe:/a:redhat:rhel_eus:9.6::crb

cpe:/a:redhat:rhel_aus:8.6::appstream

cpe:/a:redhat:rhel_eus_long_life:8.6::appstream

cpe:/a:redhat:rhel_aus:8.4::appstream

cpe:/a:redhat:rhel_eus_long_life:8.4::appstream

cpe:/o:redhat:enterprise_linux_eus:10.0

cpe:/a:redhat:rhel_e4s:8.8::appstream

cpe:/a:redhat:rhel_tus:8.8::appstream

cpe:/o:redhat:rhel_els:6

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated