Vulnerability index

Browse CVEs

38 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ultravnc CRITICAL 9.8
CVE-2026-7840

UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administration server. The functions wi_senderr() and wi_rep…

Fix: after 1.8.2.2
Fix from $2,300 2026-07-01
Ultravnc CRITICAL 9.1
CVE-2026-7839

UltraVNC repeater through 1.8.2.2 initializes the HTTP administration server with a hardcoded default password. In repeater/webgui/settings.c:197, wh…

Fix: after 1.8.2.2
Fix from $2,300 2026-07-01
Ultravnc HIGH 8.8
CVE-2026-7838

UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap buffer overflow in the RFB protocol failure-response parsing path. In …

Fix: after 1.8.2.2
Fix from $1,950 2026-07-01
Ultravnc HIGH 7.6
CVE-2026-7831

UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit message handler. In vncviewer/ClientConnection.cpp…

Fix: after 1.8.2.2
Fix from $1,950 2026-07-01
Ultravnc HIGH 7.4
CVE-2026-7830

UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp the Diffie-…

Fix: after 1.8.2.2
Fix from $1,950 2026-07-01
Ultravnc HIGH 7.2
CVE-2026-7829

UltraVNC repeater through 1.8.2.2 contains a post-authentication out-of-bounds write in the allow/deny rule parser. In repeater/webgui/settings.c:225…

Fix: after 1.8.2.2
Fix from $1,950 2026-07-01
Ultravnc MEDIUM 5.3
CVE-2026-7828

UltraVNC repeater through 1.8.2.2 contains an integer overflow in the HTTP request logging path. In repeater/webgui/settings.c:336, the win_log() fun…

Fix: after 1.8.2.2
Fix from $1,600 2026-07-01
Ultravnc MEDIUM 6.5
CVE-2026-44041

UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte conversion helper. In rfb/dh.cpp:204, the vncWc2Mb() function…

Fix: after 1.8.2.2
Fix from $1,600 2026-07-01
Ultravnc MEDIUM 6.5
CVE-2026-44040

UltraVNC through 1.8.2.2 uses a cryptographically weak pseudo-random number generator to produce VNC authentication challenge bytes. In rfb/vncauth.c…

Fix: after 1.8.2.2
Fix from $1,600 2026-07-01
Ultravnc HIGH 7.0
CVE-2026-4962

A security flaw has been discovered in UltraVNC up to 1.6.4.0. Affected by this issue is some unknown functionality in the library version.dll of the…

Fix: after 1.6.4.0
Fix from $1,950 2026-03-27
Pchelpwarev2 MEDIUM 5.5
CVE-2019-25563

PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image f…

No fix yet
Fix from $1,600 2026-03-21
Pchelpwarev2 MEDIUM 5.0
CVE-2019-25564

PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long…

No fix yet
Fix from $1,600 2026-03-21
Ultravnc HIGH 7.0
CVE-2026-3787

A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase.dll of the component Windows…

Mitigation only
Fix from $1,950 2026-03-08
Ultravnc HIGH 7.5
CVE-2020-37133

UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allows attackers to crash the appl…

Fix: after 1.2.4.0
Fix from $1,950 2026-02-05
Ultravnc MEDIUM 5.5
CVE-2020-37132

UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allows local attackers to crash th…

Fix: after 1.2.4.0
Fix from $1,600 2026-02-05
Ultravnc HIGH 7.8
CVE-2022-24750

UltraVNC is a free and open source remote pc access software. A vulnerability has been found in versions prior to 1.3.8.0 in which the DSM plugin mod…

Fix: 1.3.8.1+
Fix from $1,950 2022-03-10
Ultravnc CRITICAL 9.8
CVE-2019-8264

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. Th…

Fix: 1.2.2.3+
Fix from $2,300 2019-03-08
Ultravnc CRITICAL 9.8
CVE-2019-8265

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which c…

Fix: 1.2.2.3+
Fix from $2,300 2019-03-08
Ultravnc CRITICAL 9.8
CVE-2019-8266

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VN…

Fix: 1.2.2.3+
Fix from $2,300 2019-03-08
Ultravnc CRITICAL 9.8
CVE-2019-8268

UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString funct…

Fix: 1.2.2.3 / 4.8+
Fix from $2,300 2019-03-08
Ultravnc CRITICAL 9.8
CVE-2019-8271EPSS 8%

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code ex…

Fix: 1.2.2.3 / 4.8+
Fix from $2,300 2019-03-08
Ultravnc CRITICAL 9.8
CVE-2019-8272

UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appear…

Fix: 1.2.2.3 / 4.8+
Fix from $2,300 2019-03-08
Ultravnc CRITICAL 9.8
CVE-2019-8273EPSS 8%

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result…

Fix: 1.2.2.3 / 4.8+
Fix from $2,300 2019-03-08
Ultravnc CRITICAL 9.8
CVE-2019-8274EPSS 8%

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in resul…

Fix: 1.2.2.3 / 4.8+
Fix from $2,300 2019-03-08
Ultravnc CRITICAL 9.8
CVE-2019-8275

UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by…

Fix: 1.2.2.3 / 4.8+
Fix from $2,300 2019-03-08
Ultravnc CRITICAL 9.8
CVE-2019-8280

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This att…

Fix: 1.2.2.3+
Fix from $2,300 2019-03-08
Ultravnc HIGH 7.5
CVE-2019-8267

UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (DoS) con…

Fix: 1.2.2.3+
Fix from $1,950 2019-03-08
Ultravnc HIGH 7.5
CVE-2019-8269EPSS 6%

UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of servic…

Fix: 1.2.2.3 / 4.8+
Fix from $1,950 2019-03-08
Ultravnc HIGH 7.5
CVE-2019-8270

UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (DoS) condi…

Fix: 1.2.2.3+
Fix from $1,950 2019-03-08
Ultravnc HIGH 7.5
CVE-2019-8276EPSS 6%

UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial …

Fix: 1.2.2.3 / 4.8+
Fix from $1,950 2019-03-08