Browse CVEs

CRITICAL 9.8 CVE-2026-7840 UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administration server. The functions wi_senderr() and wi_rep… Ultravnc after 1.8.2.2 Fix from $2,3002026-07-01 CRITICAL 9.1 CVE-2026-7839 UltraVNC repeater through 1.8.2.2 initializes the HTTP administration server with a hardcoded default password. In repeater/webgui/settings.c:197, wh… Ultravnc after 1.8.2.2 Fix from $2,3002026-07-01 HIGH 8.8 CVE-2026-7838 UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap buffer overflow in the RFB protocol failure-response parsing path. In … Ultravnc after 1.8.2.2 Fix from $1,9502026-07-01 HIGH 7.6 CVE-2026-7831 UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit message handler. In vncviewer/ClientConnection.cpp… Ultravnc after 1.8.2.2 Fix from $1,9502026-07-01 HIGH 7.4 CVE-2026-7830 UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp the Diffie-… Ultravnc after 1.8.2.2 Fix from $1,9502026-07-01 HIGH 7.2 CVE-2026-7829 UltraVNC repeater through 1.8.2.2 contains a post-authentication out-of-bounds write in the allow/deny rule parser. In repeater/webgui/settings.c:225… Ultravnc after 1.8.2.2 Fix from $1,9502026-07-01 MEDIUM 5.3 CVE-2026-7828 UltraVNC repeater through 1.8.2.2 contains an integer overflow in the HTTP request logging path. In repeater/webgui/settings.c:336, the win_log() fun… Ultravnc after 1.8.2.2 Fix from $1,6002026-07-01 MEDIUM 6.5 CVE-2026-44041 UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte conversion helper. In rfb/dh.cpp:204, the vncWc2Mb() function… Ultravnc after 1.8.2.2 Fix from $1,6002026-07-01 MEDIUM 6.5 CVE-2026-44040 UltraVNC through 1.8.2.2 uses a cryptographically weak pseudo-random number generator to produce VNC authentication challenge bytes. In rfb/vncauth.c… Ultravnc after 1.8.2.2 Fix from $1,6002026-07-01 HIGH 7.0 CVE-2026-4962 A security flaw has been discovered in UltraVNC up to 1.6.4.0. Affected by this issue is some unknown functionality in the library version.dll of the… Ultravnc after 1.6.4.0 Fix from $1,9502026-03-27 MEDIUM 5.5 CVE-2019-25563 PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image f… Pchelpwarev2 No fix yet Fix from $1,6002026-03-21 MEDIUM 5.0 CVE-2019-25564 PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long… Pchelpwarev2 No fix yet Fix from $1,6002026-03-21 HIGH 7.0 CVE-2026-3787 A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase.dll of the component Windows… Ultravnc Mitigation only Fix from $1,9502026-03-08 HIGH 7.5 CVE-2020-37133 UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allows attackers to crash the appl… Ultravnc after 1.2.4.0 Fix from $1,9502026-02-05 MEDIUM 5.5 CVE-2020-37132 UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allows local attackers to crash th… Ultravnc after 1.2.4.0 Fix from $1,6002026-02-05 HIGH 7.8 CVE-2022-24750 UltraVNC is a free and open source remote pc access software. A vulnerability has been found in versions prior to 1.3.8.0 in which the DSM plugin mod… Ultravnc 1.3.8.1+ Fix from $1,9502022-03-10 CRITICAL 9.8 CVE-2019-8264 UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. Th… Ultravnc 1.2.2.3+ Fix from $2,3002019-03-08 CRITICAL 9.8 CVE-2019-8265 UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which c… Ultravnc 1.2.2.3+ Fix from $2,3002019-03-08 CRITICAL 9.8 CVE-2019-8266 UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VN… Ultravnc 1.2.2.3+ Fix from $2,3002019-03-08 CRITICAL 9.8 CVE-2019-8268 UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString funct… Ultravnc 1.2.2.3 / 4.8+ Fix from $2,3002019-03-08 CRITICAL 9.8 CVE-2019-8271EPSS 8% UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code ex… Ultravnc 1.2.2.3 / 4.8+ Fix from $2,3002019-03-08 CRITICAL 9.8 CVE-2019-8272 UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appear… Ultravnc 1.2.2.3 / 4.8+ Fix from $2,3002019-03-08 CRITICAL 9.8 CVE-2019-8273EPSS 8% UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result… Ultravnc 1.2.2.3 / 4.8+ Fix from $2,3002019-03-08 CRITICAL 9.8 CVE-2019-8274EPSS 8% UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in resul… Ultravnc 1.2.2.3 / 4.8+ Fix from $2,3002019-03-08 CRITICAL 9.8 CVE-2019-8275 UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by… Ultravnc 1.2.2.3 / 4.8+ Fix from $2,3002019-03-08 CRITICAL 9.8 CVE-2019-8280 UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This att… Ultravnc 1.2.2.3+ Fix from $2,3002019-03-08 HIGH 7.5 CVE-2019-8267 UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (DoS) con… Ultravnc 1.2.2.3+ Fix from $1,9502019-03-08 HIGH 7.5 CVE-2019-8269EPSS 6% UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of servic… Ultravnc 1.2.2.3 / 4.8+ Fix from $1,9502019-03-08 HIGH 7.5 CVE-2019-8270 UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (DoS) condi… Ultravnc 1.2.2.3+ Fix from $1,9502019-03-08 HIGH 7.5 CVE-2019-8276EPSS 6% UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial … Ultravnc 1.2.2.3 / 4.8+ Fix from $1,9502019-03-08