CVE-2026-88806

A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.

  • Published Sep 21, 2026
  • CVSS 7.5 high
  • 0.2% chance of exploitation in the next 30 days (EPSS)
  • A fix is available

Affected software

CVE-2026-88806 at the National Vulnerability Database