X.Org has disclosed three critical vulnerabilities in its X server and Xwayland implementations, including use-after-free and integer overflow flaws affecting systems running versions prior to 21.1.18 and 24.1.8 respectively. These decades-old security holes could enable arbitrary code execution and system crashes, demanding immediate patching. The fixes land in xorg-server 21.1.19 and xwayland 24.1.9.