The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0031 advisory.

    Xwayland is an X server for running X clients under Wayland.

    Security Fix(es):

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)

    * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)

    * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0036 advisory.

    Xwayland is an X server for running X clients under Wayland.

    Security Fix(es):

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)

    * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)

    * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11092:08 advisory.

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
      * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
      * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57232. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ57232 advisory.

  - A flaw was identified in the X.Org X server's X Keyboard (Xkb) extension where improper bounds checking in     the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially     crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
    (CVE-2025-62231)

  - A flaw was discovered in the X.Org X server's X Keyboard (Xkb) extension when handling client resource     cleanup. The software frees certain data structures without properly detaching related resources, leading     to a use-after-free condition. This can cause memory corruption or a crash when affected clients     disconnect. (CVE-2025-62230)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:1016 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-62229:
    A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications.
    Improper error handling during notification creation can leave dangling pointers that lead to a use-after-     free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute     arbitrary code or cause a denial of service.

    CVE-2025-62230:
    A flaw was discovered in the X.Org X servers X Keyboard (Xkb) extension when handling client resource     cleanup. The software frees certain data structures without properly detaching related resources, leading     to a use-after-free condition. This can cause memory corruption or a crash when affected clients     disconnect.

    CVE-2025-62231:
    A flaw was identified in the X.Org X servers X Keyboard (Xkb) extension where improper bounds checking     in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially     crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_19435 advisory.

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)

    * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)

    * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f59b250c31 advisory.

    Fix recent xorg-x11-server CVEs:
    Fixes: CVE-2025-62229 CVE-2025-62230 CVE-2025-62231

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
281746	RHEL 9 : xorg-x11-server-Xwayland (RHSA-2026:0031)	Nessus	Red Hat Local Security Checks	1/5/2026	1/5/2026	high
281749	RHEL 9 : xorg-x11-server-Xwayland (RHSA-2026:0036)	Nessus	Red Hat Local Security Checks	1/5/2026	1/5/2026	high
283020	MiracleLinux 9 : tigervnc-1.14.1-9.el9_6.ML.1 (AXSA:2025-11092:08)	Nessus	Miracle Linux Local Security Checks	1/13/2026	2/16/2026	high
299693	AIX : Multiple Vulnerabilities (IJ57232)	Nessus	AIX Local Security Checks	2/20/2026	10/16/2026	high
316716	TencentOS Server 3: tigervnc (TSSA-2025:1016)	Nessus	Tencent Local Security Checks	5/26/2026	5/26/2026	high
357591	Rocky Linux 10.0 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_19435)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high
277348	Fedora 42 : tigervnc (2025-f59b250c31)	Nessus	Fedora Local Security Checks	12/3/2025	12/3/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high