X11 server and client libraries for macOS are available from the Works as expected with macOS and latest available versions of XQuartz.

Apple is aĬontributor to the XQuartz project and has worked to ensure that X11 Since been multiple releases of XQuartz with fixes, support for newįeatures, and additional refinements to the X11 experience. The XQuartz project was originallyīased on the version of X11 included in Mac OS X v10.5. Libraries are available from the XQuartz project.Īpple created the XQuartz project as a community effort to furtherĭevelop and support X11 on Mac. X11 is no longer included with Mac, but X11 server and client In 2017, apple made a shift away from this XQuartz as the main display server/ window server as mentioned here. Libraries and applications, it forms the X11.app that Apple shipped The X.Org X Window System that runs on OS X.

The XQuartz project is an open-source effort to develop a version of XQuartz official website mentions the following Older XQuartz (used by apple) was very much based on this X11, and hence these vulnerabilities were also there on MacOS.

The xhost + option can completely disable any security on the display.

Applications such as browsers can be remotely controlled such that keystrokes can be forged as if the user were typing them.

All X applications can register to receive every keystroke, regardless of which window said keystrokes are typed within.

All X applications have access to everything on your screen.

Important security features that are critical for modern era usage and When X was originally conceived, the computing world X.org replaced X11 and was originally releasedĪpril 6, 2004. article here.įor those that don't know, X was originally designed and released inġ985 and X11 in 1987. Recently it was discovered in 2013 that this X11 has a very big vulnerability. The window server/ display server used on linux is X11, on which OSX's window server XQuartz (now almost deprecated) was based on. This question will be a long one, as I have given lot of time in doing research and also I have attached all my research in the question itself.

Nomachine client vulnerability