CVE-2026-50263

LLM-synthesized narrative grounded in this CVE's description and references.

• Xorg/Xserverinferred3 versions

  (expand)+ 2 more

  • (no CPE)
  • cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*range: <21.1.23
  • (no CPE)
• Xorg/Xwayland2 versions

  cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*range: <24.1.12
  • (no CPE)
• Red Hat/Enterprise Linux Server4 versions

  cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*+ 3 more

  • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
• osv-coords17 versions

  pkg:rpm/almalinux/tigervncpkg:rpm/almalinux/tigervnc-iconspkg:rpm/almalinux/tigervnc-licensepkg:rpm/almalinux/tigervnc-selinuxpkg:rpm/almalinux/tigervnc-serverpkg:rpm/almalinux/tigervnc-server-minimalpkg:rpm/almalinux/tigervnc-server-modulepkg:rpm/almalinux/xorg-x11-server-commonpkg:rpm/almalinux/xorg-x11-server-develpkg:rpm/almalinux/xorg-x11-server-sourcepkg:rpm/almalinux/xorg-x11-server-Xdmxpkg:rpm/almalinux/xorg-x11-server-Xephyrpkg:rpm/almalinux/xorg-x11-server-Xnestpkg:rpm/almalinux/xorg-x11-server-Xorgpkg:rpm/almalinux/xorg-x11-server-Xvfbpkg:rpm/almalinux/xorg-x11-server-Xwaylandpkg:rpm/almalinux/xorg-x11-server-Xwayland-devel

  < 1.15.0-10.el8_10+ 16 more

  • (no CPE)range: < 1.15.0-10.el8_10
  • (no CPE)range: < 1.15.0-10.el8_10
  • (no CPE)range: < 1.15.0-10.el8_10
  • (no CPE)range: < 1.15.0-10.el8_10
  • (no CPE)range: < 1.15.0-10.el8_10
  • (no CPE)range: < 1.15.0-10.el8_10
  • (no CPE)range: < 1.15.0-10.el8_10
  • (no CPE)range: < 1.20.11-34.el9_8.2
  • (no CPE)range: < 1.20.11-34.el9_8.2
  • (no CPE)range: < 1.20.11-34.el9_8.2
  • (no CPE)range: < 1.20.11-34.el9_8.2
  • (no CPE)range: < 1.20.11-34.el9_8.2
  • (no CPE)range: < 1.20.11-34.el9_8.2
  • (no CPE)range: < 1.20.11-34.el9_8.2
  • (no CPE)range: < 1.20.11-34.el9_8.2
  • (no CPE)range: < 21.1.3-20.el8_10.2
  • (no CPE)range: < 24.1.9-4.el9_8.2

• gitlab.freedesktop.org/xorg/xserver/-/commit/ecc634f1b2f7aa473d3a267eada98c4918bf9e05nvdPatch
• access.redhat.com/security/cve/CVE-2026-50263nvdThird Party Advisory
• bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
• lists.x.org/archives/xorg-announce/2026-June/003702.htmlnvdMailing ListVendor Advisory
• redhat.atlassian.net/browse/PSIRTSUPT-16950nvdPermissions Required

• ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability
  Zero Day Initiative · Jun 24, 2026
• Patch Tuesday - June 2026
  Rapid7 Blog · Jun 9, 2026
• Xorg X server: Nine High-Severity Flaws Disclosed Together
  Vypr Intelligence · Jun 5, 2026