X.org x11r7 vulnerabilities

2 CVEs affecting X.org x11r7, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-4447, published 2006-08-30.

More from X.org.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-0745, published 2006-03-21. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users…
• CVE-2006-4447, published 2006-08-30. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow…