https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-34557.htmlhttps://patchthecve.com/cve/CVE-2021-34557.htmlWed, 17 Jun 2026 03:56:07 +0000MEDIUM 4.6: XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video outhttps://patchthecve.com/cve/CVE-2021-31523.htmlhttps://patchthecve.com/cve/CVE-2021-31523.htmlWed, 17 Jun 2026 03:51:57 +0000HIGH 7.8: The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency.https://patchthecve.com/cve/CVE-2011-2187.htmlhttps://patchthecve.com/cve/CVE-2011-2187.htmlTue, 16 Jun 2026 23:30:52 +0000HIGH 7.8: xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.https://patchthecve.com/cve/CVE-2015-8025.htmlhttps://patchthecve.com/cve/CVE-2015-8025.htmlWed, 17 Jun 2026 00:33:53 +0000LOW 2.1: driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.