Known Vulnerabilities for products from TigerVNC
Listed below are 20 of the newest known vulnerabilities associated with the vendor "TigerVNC".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-34352 json | In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause... | Not Provided | 2026-03-26 | 2026-06-04 |
| CVE-2025-26601 json | A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated on... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2025-26600 json | A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for tha... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2025-26599 json | An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it c... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2025-26598 json | An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device ... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2025-26597 json | A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2025-26596 json | A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is ... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2025-26595 json | A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the s... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2025-26594 json | A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If... | Not Provided | 2025-02-25 | 2026-06-29 |
| CVE-2024-0409 json | 7.8 - HIGH | 2024-01-18 | 2024-01-31 | |
| CVE-2024-0408 json | 5.5 - MEDIUM | 2024-01-18 | 2024-01-31 | |
| CVE-2020-26117 json | In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. Th... | 8.1 - HIGH | 2020-09-27 | 2022-11-16 |
| CVE-2019-15695 json | TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCur... | 7.2 - HIGH | 2019-12-26 | 2020-10-16 |
| CVE-2019-15694 json | TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRe... | 7.2 - HIGH | 2019-12-26 | 2020-10-16 |
| CVE-2019-15693 json | TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploit... | 7.2 - HIGH | 2019-12-26 | 2023-01-20 |
| CVE-2019-15692 json | TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder... | 7.2 - HIGH | 2019-12-26 | 2022-12-22 |
| CVE-2019-15691 json | TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory... | 7.2 - HIGH | 2019-12-26 | 2022-11-09 |
| CVE-2017-7396 json | In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the ... | Not Provided | 2017-04-01 | 2025-04-20 |
| CVE-2017-7395 json | In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can... | Not Provided | 2017-04-01 | 2025-04-20 |
| CVE-2017-7394 json | In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long... | Not Provided | 2017-04-01 | 2025-04-20 |
Known software with vulnerabilities from TigerVNC
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Tigervnc | Tigervnc | - |