Read the docs

uvnc

Records41All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

uvnc records in CISA KEV

No uvnc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

37 records in Ultravnc · all components

Priority HIGH 69

UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allows attackers to crash the application.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00538 Published 2026-02-05 No fix listed CWE-121
Priority MEDIUM 63

UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allows local attackers to crash the application.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00254 Published 2026-02-05 No fix listed CWE-121
Priority MEDIUM 53

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08263 Published 2019-03-09 No fix listed CWE-122
Priority MEDIUM 53

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08263 Published 2019-03-09 No fix listed CWE-122
Priority MEDIUM 53

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08263 Published 2019-03-09 No fix listed CWE-122
TI-2019-05934 CVE-2019-8262 · GHSA-28h7-jgqq-qp89

Heap-based buffer overflow in UltraVNC

Priority MEDIUM 50

UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04843 Published 2019-03-05 No fix listed CWE-122
Priority MEDIUM 49

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04248 Published 2019-03-09 No fix listed CWE-788
TI-2019-05930 CVE-2019-8258 · GHSA-gvjj-vw6c-72cq

Heap-based buffer overflow in UltraVNC

Priority MEDIUM 49

UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04434 Published 2019-03-05 No fix listed CWE-122
Priority MEDIUM 48

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03142 Published 2019-03-09 No fix listed CWE-788
Priority MEDIUM 48

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03129 Published 2019-03-09 No fix listed CWE-788
Priority MEDIUM 47

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potentially result in code execution.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02838 Published 2019-03-09 No fix listed CWE-788
TI-2018-10923 CVE-2018-15361 · GHSA-5g7c-7pq7-39h8

Out-of-bounds write in UltraVNC

Priority MEDIUM 47

UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02876 Published 2019-03-05 No fix listed CWE-124
TI-2019-05933 CVE-2019-8261 · GHSA-frcm-7p38-7j57

Out-of-bounds read in UltraVNC

Priority MEDIUM 46

UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02243 Published 2019-03-05 No fix listed CWE-125
TI-2019-05932 CVE-2019-8260 · GHSA-vm9w-77x5-h7q8

Out-of-bounds read in UltraVNC

Priority MEDIUM 46

UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02253 Published 2019-03-05 No fix listed CWE-125
Priority MEDIUM 41

UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05722 Published 2019-03-09 No fix listed CWE-121
Priority MEDIUM 41

UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05722 Published 2019-03-09 No fix listed CWE-121
Load more
Open these records in search →