Red Hat Security AdvisoryRHSA-2026:19342
tigervnc security update
Released 2026-05-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) tigervnc-1.15.0-7.el9_8.1, tigervnc-icons-1.15.0-7.el9_8.1, tigervnc-license-1.15.0-7.el9_8.1 +4
Fixes 5 records
Priority HIGH 75
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00251 · Published 2026-03-26 · Fixed in 1.16.2 CWE-732
Priority MEDIUM 40
A flaw was found in the X.Org X server.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00489 · Published 2026-05-05 · Partial fix · 24.1.5-6.el10_0, 1.1.0-25.el6_10.16 +23 CWE-125
Priority LOW 36
A flaw was found in the X.Org X server's XKB key types request validation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0025 · Published 2026-04-23 · Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-125
Priority LOW 36
A flaw was found in the X.Org X server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-04-23 · Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-825
Priority LOW 36
A flaw was found in the X.Org X server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0038 · Published 2026-04-23 · Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-191
