[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2025-26599":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":29,"references":34,"score":53,"epss_score":54,"epss_percentile":55,"is_kev":19,"cisa_kev_date_added":56,"cisa_kev_due_date":56,"cisa_ssvc":57,"attack_mappings":67,"exploits":74},101918,"CVE-2025-26599","EUVD-2025-5424","An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.","2025-02-25T16:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":18,"confidentialityImpact":15},"UNCHANGED","3.1",7.8,"LOCAL","HIGH","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE","LOW",false,[21],"CWE-824",[23,24,25,26,27,28],"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*","cpe:2.3:a:tigervnc:tigervnc:-:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*","cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*",[30,31,32,33],"Redhat Enterprise Linux","Tigervnc Tigervnc","X.Org Xwayland","X.Org X Server",[35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52],"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:2500","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:2502","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:2861","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:2862","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:2865","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:2866","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:2873","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:2874","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:2875","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:2879","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:2880","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:3976","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:7163","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:7165","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:7458","https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-26599","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2345253","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00036.html",0.39,0.00405,0.3444,null,{"timestamp":58,"automatable":59,"tech_impact":60,"exploitation":61,"cisa_decision":62,"cisa_remediation_timeline":66},"2025-02-25T16:22:35.562208Z","no","total","none",{"vector":63,"decision":64,"priority":65},"CISAv1\u002FE:N\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T19:15:08.191374\u002F","track_star","medium","14D",[68],{"name":69,"source":70,"tactics":71,"technique_id":73},"Exploitation for Privilege Escalation","attack_vector",[72],"privilege-escalation","T1068",[]]