Priority HIGH 75
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00251 · Published 2026-03-26 · Fixed in 1.16.2 CWE-732
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416
Priority LOW 36
An access to an uninitialized pointer flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00405 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-824
Priority LOW 36
An out-of-bounds write flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00405 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-787
Priority LOW 36
A buffer overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00444 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-119
Priority LOW 36
A heap overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-787
Priority LOW 36
A buffer overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-121
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416
Priority LOW 34
A flaw was found in the X.Org server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00356 · Published 2024-01-18 · Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-787
Priority LOW 25
A flaw was found in the X.Org server.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00321 · Published 2024-01-18 · Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-158
Priority MEDIUM 43
A flaw was found in xorg-server.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.01617 · Published 2023-12-13 · Partial fix · 1.1.0-25.el6_10.13, 1.8.0-28.el7_9 +13 CWE-190
Priority LOW 39
A flaw was found in xorg-server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01574 · Published 2023-12-13 · Partial fix · 1.1.0-25.el6_10.14, 1.8.0-28.el7_9 +13 CWE-125
Priority MEDIUM 41
In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.0306 · Published 2020-09-27 · Partial fix CWE-295
Priority MEDIUM 47
Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and po…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02494 · Published 2020-01-02 · Fixed in 1.3.1 CWE-787
Priority LOW 39
TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04485 · Published 2019-12-26 · Partial fix CWE-121
Priority LOW 39
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04485 · Published 2019-12-26 · Partial fix CWE-122
Priority LOW 39
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04277 · Published 2019-12-26 · Partial fix CWE-122
Priority LOW 39
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04773 · Published 2019-12-26 · Partial fix CWE-122
Priority LOW 39
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04719 · Published 2019-12-26 · Partial fix CWE-825
Priority LOW 37
In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02033 · Published 2017-04-01 · Partial fix CWE-772
Priority LOW 32
In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01432 · Published 2017-04-01 · Partial fix CWE-190
Priority LOW 36
In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01612 · Published 2017-04-01 · Partial fix CWE-20
Priority MEDIUM 42
In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0182 · Published 2017-04-01 · Fixed CWE-415
Priority LOW 36
In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01719 · Published 2017-04-01 · Partial fix CWE-772
Load more
THREATIST.IORead the docs