Browse CVEs

CRITICAL 9.8 CVE-2026-34352 In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, b… Tigervnc 1.16.2+ Fix from $2,3002026-03-26 CRITICAL 9.8 CVE-2014-0011 Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow r… Tigervnc 1.3.1+ Fix from $2,3002020-01-02 HIGH 7.2 CVE-2019-15695 TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor. This vulnerability … Tigervnc 1.10.1+ Fix from $1,9502019-12-26 HIGH 7.2 CVE-2019-15691 TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If deco… Tigervnc 1.10.1+ Fix from $1,9502019-12-26 HIGH 7.2 CVE-2019-15692 TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder due to incorrect value … Tigervnc 1.10.1+ Fix from $1,9502019-12-26 HIGH 7.2 CVE-2019-15693 TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploitation of this vulnerabil… Tigervnc 1.10.1+ Fix from $1,9502019-12-26 HIGH 7.2 CVE-2019-15694 TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs… Tigervnc 1.10.1+ Fix from $1,9502019-12-26 HIGH 8.8 CVE-2017-7393 In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or po… Tigervnc Patch available Fix from $1,9502017-04-01 HIGH 7.5 CVE-2017-7392 In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server. Tigervnc Patch available Fix from $1,9502017-04-01 HIGH 7.5 CVE-2017-7394 In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames. Tigervnc Patch available Fix from $1,9502017-04-01 HIGH 7.5 CVE-2017-7396 In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server. Tigervnc Patch available Fix from $1,9502017-04-01 MEDIUM 6.5 CVE-2017-7395 In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server. Tigervnc Patch available Fix from $1,6002017-04-01 CRITICAL 9.8 CVE-2017-5581 Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE m… Tigervnc after 1.7 Fix from $2,3002017-02-28 HIGH 7.5 CVE-2014-8240 Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related t… Tigervnc Mitigation only Fix from $1,9502014-10-16 MEDIUM 5.8 CVE-2011-1775 The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the ser… Tigervnc Mitigation only Fix from $1,6002011-05-26