Priority HIGH 75
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00251 · Published 2026-03-26 · Fixed in 1.16.2 CWE-732
Priority MEDIUM 49
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04247 · Published 2017-02-28 · Fixed CWE-119
Priority MEDIUM 48
XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03063 · Published 2016-12-14 · Partial fix CWE-476
Priority MEDIUM 47
Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and po…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02494 · Published 2020-01-02 · Fixed in 1.3.1 CWE-787
Priority MEDIUM 43
A flaw was found in xorg-server.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.01617 · Published 2023-12-13 · Partial fix · 1.1.0-25.el6_10.13, 1.8.0-28.el7_9 +13 CWE-190
Priority MEDIUM 42
In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0182 · Published 2017-04-01 · Fixed CWE-415
Priority MEDIUM 41
In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.0306 · Published 2020-09-27 · Partial fix CWE-295
Priority LOW 39
A flaw was found in xorg-server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01574 · Published 2023-12-13 · Partial fix · 1.1.0-25.el6_10.14, 1.8.0-28.el7_9 +13 CWE-125
Priority LOW 39
TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04485 · Published 2019-12-26 · Partial fix CWE-121
Priority LOW 39
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04485 · Published 2019-12-26 · Partial fix CWE-122
Priority LOW 39
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04277 · Published 2019-12-26 · Partial fix CWE-122
Priority LOW 39
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04773 · Published 2019-12-26 · Partial fix CWE-122
Priority LOW 39
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04719 · Published 2019-12-26 · Partial fix CWE-825
Priority LOW 39
The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03179 · Published 2017-02-28 · Fixed CWE-119
Priority LOW 39
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03547 · Published 2014-10-16 · Partial fix CWE-119
Priority LOW 37
In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02033 · Published 2017-04-01 · Partial fix CWE-772
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416
Priority LOW 36
An access to an uninitialized pointer flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00405 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-824
Priority LOW 36
An out-of-bounds write flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00405 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-787
Priority LOW 36
A buffer overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00444 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-119
Priority LOW 36
A heap overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-787
Priority LOW 36
A buffer overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-121
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416
Priority LOW 36
In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01612 · Published 2017-04-01 · Partial fix CWE-20
Load more
THREATIST.IORead the docs