Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: GlavSoft Clear all filters
TI-2026-69582 CVE-2026-107615 · GHSA-c7v7-v5cv-43wm

DLL search order hijacking via screenhooks libraries in TightVNC Server

Priority LOW 35

An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0014 Published 2026-10-08 Fixed in 2.8.88 CWE-427
TI-2026-69581 CVE-2026-107614 · GHSA-v6fq-v4c3-2qr7

Integer underflow in TightVNC Server cursor shape trimming

Priority LOW 26

An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by ca…

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00106 Published 2026-10-08 Fixed in 2.8.88 CWE-125
TI-2026-69580 CVE-2026-107613 · GHSA-c4jj-c6x2-r973

NULL pointer dereference in TightVNC Server Win8ScreenDriver crashes server

Priority LOW 26

A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00308 Published 2026-10-08 Fixed in 2.8.88 CWE-476
TI-2026-69579 CVE-2026-107612 · GHSA-95xq-4x4f-23hr

Incorrect permissions on TightVNC IPC shared memory in TightVNC Server

Priority LOW 35

Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and i…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00104 Published 2026-10-08 Fixed in 2.8.88 CWE-338
TI-2026-69578 CVE-2026-107611 · GHSA-r575-8hw6-vfq3

Out-of-bounds read in TightVNC Viewer ZRLE palette decoding

Priority LOW 31

An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromised VNC server to read heap memory beyond the palette allocation and crash the v…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00236 Published 2026-10-08 Fixed in 2.8.88 CWE-125