{
  "cveId": "CVE-2026-34002",
  "url": "https://patchblox.com/security/cve/CVE-2026-34002",
  "summary": "CVE-2026-34002 is fixed in 40 products on 1 platform, first by SUSE-SU-2026:1328-1, released April 14, 2026. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "xorg-x11-server: This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-33999: XKB integer underflow in XkbSetCompatM...",
  "description": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).\n- CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).\n- CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).\n- CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).\n- CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).",
  "published": "2026-04-14T17:04:46Z",
  "severity": "critical",
  "cvss": 9.1,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
  "epss": 0.00489,
  "epssPercentile": 0.42321,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "tigervnc",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-debugsource",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-icons",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-icons",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-license",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-license",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-selinux",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-selinux",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-server",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-server-common",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-server-common-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-server-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-server-minimal",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-server-minimal-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-server-module",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-server-module-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.14.1-3.amzn2023.0.5",
      "fix": "ALAS2023-2026-1626",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1626",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-wayland-server",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-wayland-server-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-x11-server",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-x11-server-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-x11-server-module",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "tigervnc-x11-server-module-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "1.16.2-4.fc43",
      "fix": "FEDORA-2026-AD10AFA9CD",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-ad10afa9cd",
      "released": "2026-06-18T13:52:59Z"
    },
    {
      "platform": "linux",
      "product": "xorg-server",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "2:21.1.7-3\u002Bdeb12u12",
      "fix": "DEBIAN-CVE-2026-34002",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-34002",
      "released": "2026-05-15T16:01:09Z"
    },
    {
      "platform": "linux",
      "product": "xorg-server",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2:21.1.16-1.3\u002Bdeb13u2",
      "fix": "DEBIAN-CVE-2026-34002",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-34002",
      "released": "2026-05-15T16:01:09Z"
    },
    {
      "platform": "linux",
      "product": "xorg-server",
      "release": "Debian 14",
      "fixedVersion": "2:21.1.22-1",
      "fix": "DEBIAN-CVE-2026-34002",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-34002",
      "released": "2026-05-15T16:01:09Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "21.1.11-150600.5.25.1",
      "fix": "SUSE-SU-2026:1331-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1331-1",
      "released": "2026-04-14T17:11:37Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "21.1.15-160000.4.1",
      "fix": "OPENSUSE-SU-2026:20544-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20544-1",
      "released": "2026-04-15T15:56:59Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server",
      "release": "sles 15.6",
      "fixedVersion": "21.1.11-150600.5.25.1",
      "fix": "SUSE-SU-2026:1331-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1331-1",
      "released": "2026-04-14T17:11:37Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server",
      "release": "sles 15.7",
      "fixedVersion": "21.1.15-150700.5.16.1",
      "fix": "SUSE-SU-2026:1330-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1330-1",
      "released": "2026-04-14T17:08:59Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xephyr",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xephyr-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xnest",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xnest-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xorg",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xorg-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xvfb",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xvfb-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xwayland",
      "release": "RHEL 10",
      "fixedVersion": "24.1.5-6.el10_0",
      "fix": "RHSA-2026:20563",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-20563",
      "released": "2026-04-30T14:22:30Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xwayland",
      "release": "amzn 2023",
      "fixedVersion": "24.1.3-1.amzn2023.0.4",
      "fix": "ALAS2023-2026-1613",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1613",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xwayland-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "24.1.3-1.amzn2023.0.4",
      "fix": "ALAS2023-2026-1613",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1613",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xwayland-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "24.1.3-1.amzn2023.0.4",
      "fix": "ALAS2023-2026-1613",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1613",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-Xwayland-devel",
      "release": "amzn 2023",
      "fixedVersion": "24.1.3-1.amzn2023.0.4",
      "fix": "ALAS2023-2026-1613",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1613",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-common",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-devel",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xorg-x11-server-source",
      "release": "amzn 2023",
      "fixedVersion": "21.1.13-5.amzn2023.0.9",
      "fix": "ALAS2023-2026-1614",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1614",
      "released": "2026-04-27T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xwayland",
      "release": "Debian 14",
      "fixedVersion": "2:24.1.10-1",
      "fix": "DEBIAN-CVE-2026-34002",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-34002",
      "released": "2026-05-15T16:01:09Z"
    },
    {
      "platform": "linux",
      "product": "xwayland",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "24.1.1-150600.5.23.1",
      "fix": "SUSE-SU-2026:1329-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1329-1",
      "released": "2026-04-14T17:06:20Z"
    },
    {
      "platform": "linux",
      "product": "xwayland",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "24.1.6-160000.4.1",
      "fix": "OPENSUSE-SU-2026:20560-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20560-1",
      "released": "2026-04-17T07:57:12Z"
    },
    {
      "platform": "linux",
      "product": "xwayland",
      "release": "sles 15.7",
      "fixedVersion": "24.1.5-150700.3.14.1",
      "fix": "SUSE-SU-2026:1328-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1328-1",
      "released": "2026-04-14T17:04:46Z"
    },
    {
      "platform": "linux",
      "product": "xwayland",
      "release": "sles 16.0",
      "fixedVersion": "24.1.6-160000.4.1",
      "fix": "SUSE-SU-2026:21211-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-21211-1",
      "released": "2026-04-17T07:57:47Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}