Vulnerabilities

TI-2022-20315 CVE-2022-41975 · GHSA-vx7g-xm5j-vv7c

RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local…

LOW 35

RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI installer Repair mode.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00185 Published 2022-09-30 No fix listed CWE-269

TI-2022-10516 CVE-2022-27502 · GHSA-fcfr-67qx-fpgv

RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation…

LOW 35

RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00671 Published 2022-06-10 No fix listed

TI-2021-18199 CVE-2021-41380 · GHSA-789c-r6w2-66gw

RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service…

LOW 31

RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service (application crash) via crafted RFB protocol data.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00956 Published 2021-09-17 No fix listed CWE-20

TI-2013-05659 CVE-2013-6886 · GHSA-68gv-6mh2-vmw2

RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via…

LOW 32

RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to the (1) vncserver, (2) vncserver-x11, or (3) Xvnc helper.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00447 Published 2013-12-28 No fix listed CWE-264

TI-2008-04553 CVE-2008-4770 · GHSA-88j9-g2xv-54vp

The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition…

MEDIUM 50

The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to e…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04052 Published 2009-01-16 Fixed CWE-20

TI-2008-03345 CVE-2008-3493 · GHSA-h2jf-52qm-348c

vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a…