CVE-2007-6532: Xfce

High severity, CVSS 10.0. EPSS: 4% chance of exploitation in the next 30 days.

Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."

Affected products

• Xfce Xfce: up to and including 4.4.1

Published 2008-01-09. Last modified 2026-06-16.