CVE-2012-0064
MEDIUM · CVSS 4.6EPSS 0.4%EU EUVD
xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.
Key facts
- CVSS score
- 4.6 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:L/AC:L/Au:N/C:P/I:P/A:P- Weakness (CWE)
- CWE-264
- EPSS score
- 0.4% (33th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2012-0102)
- Published
- February 10, 2014
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2012-0102 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.
View on the EU Vulnerability DatabaseAffected products
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- x / x.org x11
- xkeyboard config project / xkeyboard-config
- xkeyboard config project / xkeyboard-config
- xkeyboard config project / xkeyboard-config
- xkeyboard config project / xkeyboard-config
- xkeyboard config project / xkeyboard-config
References
- http://gu1.aeroxteam.fr/2012/01/19/bypass-screensaver-locker-program-xorg-111-and-up/
- http://lists.x.org/archives/xorg-announce/2012-January/001797.html
- http://lists.x.org/archives/xorg-devel/2012-January/028691.html
- http://securitytracker.com/id?1026549
- http://who-t.blogspot.com/2012/01/xkb-breaking-grabs-cve-2012-0064.html
- http://www.openwall.com/lists/oss-security/2012/01/19/6
- http://www.osvdb.org/78445
- http://www.x.org/wiki/Development/Security/(Vendor Advisory)
- https://bugzilla.redhat.com/show_bug.cgi?id=783039
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain