Read the docs

GlavSoft

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

GlavSoft records in CISA KEV

No GlavSoft vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-69582 CVE-2026-107615 · GHSA-c7v7-v5cv-43wm

DLL search order hijacking via screenhooks libraries in TightVNC Server

Priority LOW 35

An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0014 Published 2026-10-08 Fixed in 2.8.88 CWE-427
TI-2026-69579 CVE-2026-107612 · GHSA-95xq-4x4f-23hr

Incorrect permissions on TightVNC IPC shared memory in TightVNC Server

Priority LOW 35

Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and i…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00104 Published 2026-10-08 Fixed in 2.8.88 CWE-338
TI-2026-69578 CVE-2026-107611 · GHSA-r575-8hw6-vfq3

Out-of-bounds read in TightVNC Viewer ZRLE palette decoding

Priority LOW 31

An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromised VNC server to read heap memory beyond the palette allocation and crash the v…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00236 Published 2026-10-08 Fixed in 2.8.88 CWE-125
TI-2026-69581 CVE-2026-107614 · GHSA-v6fq-v4c3-2qr7

Integer underflow in TightVNC Server cursor shape trimming

Priority LOW 26

An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by ca…

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00106 Published 2026-10-08 Fixed in 2.8.88 CWE-125
TI-2026-69580 CVE-2026-107613 · GHSA-c4jj-c6x2-r973

NULL pointer dereference in TightVNC Server Win8ScreenDriver crashes server

Priority LOW 26

A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00308 Published 2026-10-08 Fixed in 2.8.88 CWE-476
Open these records in search →