2 CVEs affecting Xorg products, 0 known to be exploited (CISA KEV), with EPSS scores. Most affected: x11, Xserver, Xwayland.