Red Hat Security AdvisoryRHSA-2026:49519
tigervnc security update
Released 2026-08-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) tigervnc-1.1.0-25.el6_10.18, tigervnc-server-1.1.0-25.el6_10.18
- Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) tigervnc-server-applet-1.1.0-25.el6_10.18, tigervnc-server-module-1.1.0-25.el6_10.18
Fixes 8 records
Priority LOW 35
A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00154 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416
Priority LOW 35
A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00154 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416
Priority LOW 35
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-121
Priority LOW 35
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00161 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-121
Priority LOW 35
A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00142 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416
Priority LOW 35
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00157 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-121
Priority LOW 24
A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow().
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00141 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-416
Priority LOW 24
An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes().
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00132 · Published 2026-06-05 · Partial fix · 24.1.9-4.el10_2.2, 24.1.5-6.el10_0.1 +26 CWE-125
THREATIST.IORead the docs