X.org : Security Vulnerabilities, CVEs, CVSS score >= 5

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.

An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.