Red Hat Security AdvisoryRHSA-2026:24341
tigervnc security update
Released 2026-06-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) tigervnc-1.12.0-6.el8_6.17, tigervnc-icons-1.12.0-6.el8_6.17, tigervnc-license-1.12.0-6.el8_6.17 +4
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) tigervnc-1.12.0-6.el8_6.17, tigervnc-icons-1.12.0-6.el8_6.17, tigervnc-license-1.12.0-6.el8_6.17 +4
Fixes 6 records
Priority HIGH 75
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00251 · Published 2026-03-26 · Fixed in 1.16.2 CWE-732
Priority MEDIUM 40
A flaw was found in the X.Org X server.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00489 · Published 2026-05-05 · Partial fix · 24.1.5-6.el10_0, 1.1.0-25.el6_10.16 +22 CWE-805
Priority MEDIUM 40
A flaw was found in the X.Org X server.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00489 · Published 2026-05-05 · Partial fix · 24.1.5-6.el10_0, 1.1.0-25.el6_10.16 +23 CWE-125
Priority LOW 36
A flaw was found in the X.Org X server's XKB key types request validation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0025 · Published 2026-04-23 · Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-125
Priority LOW 36
A flaw was found in the X.Org X server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-04-23 · Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-825
Priority LOW 36
A flaw was found in the X.Org X server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0038 · Published 2026-04-23 · Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-191
