PT-2026-33102 · Unknown+1 · Xorg-X11-Server+1

Published 2026-04-14 · Updated 2026-04-23 · CVE-2026-33999

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions xwayland versions prior to 24.1.9-2.1 xorg-x11-server versions prior to 21.1.21-5.1

Description Security issues were identified in xwayland and xorg-x11-server.

Recommendations Update xwayland to version 24.1.9-2.1. Update xorg-x11-server to version 21.1.21-5.1.

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2026-33999

ECHO-3BF6-384C-577F

OPENSUSE-SU-2026:10556-1

OPENSUSE-SU-2026:10557-1

OPENSUSE-SU-2026:20544-1

OPENSUSE-SU-2026:20560-1

SUSE-SU-2026:1328-1

SUSE-SU-2026:1329-1

SUSE-SU-2026:1330-1

SUSE-SU-2026:1331-1

SUSE-SU-2026:1332-1

SUSE-SU-2026:1333-1

SUSE-SU-2026:1335-1

SUSE-SU-2026:21211-1

Affected Products

Xorg-X11-Server

Xwayland

References · 40

• https://ubuntu.com/security/CVE-2026-33999 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10557-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1329-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1331-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20560-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-33999 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-33999 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1335-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21211-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20544-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1332-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33999 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:1328-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10556-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1330-1 · Vendor Advisory