Known Vulnerabilities for products from Tigervnc

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Tigervnc".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-34352 json In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause... Not Provided 2026-03-26 2026-04-02
CVE-2025-26601 json A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated on... Not Provided 2025-02-25 2026-04-06
CVE-2025-26600 json A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for tha... Not Provided 2025-02-25 2026-04-06
CVE-2025-26599 json An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it c... Not Provided 2025-02-25 2026-04-06
CVE-2025-26598 json An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device ... Not Provided 2025-02-25 2026-04-06
CVE-2025-26597 json A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the... Not Provided 2025-02-25 2026-04-06
CVE-2025-26596 json A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is ... Not Provided 2025-02-25 2026-04-06
CVE-2025-26595 json A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the s... Not Provided 2025-02-25 2026-04-06
CVE-2025-26594 json A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If... Not Provided 2025-02-25 2026-04-06
CVE-2024-0409 json 7.8 - HIGH 2024-01-18 2024-01-31
CVE-2024-0408 json 5.5 - MEDIUM 2024-01-18 2024-01-31
CVE-2023-6478 json 7.5 - HIGH 2023-12-13 2024-01-31
CVE-2023-6377 json 7.8 - HIGH 2023-12-13 2024-01-31
CVE-2020-26117 json In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. Th... 8.1 - HIGH 2020-09-27 2022-11-16
CVE-2019-15695 json TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCur... 7.2 - HIGH 2019-12-26 2020-10-16
CVE-2019-15694 json TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRe... 7.2 - HIGH 2019-12-26 2020-10-16
CVE-2019-15693 json TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploit... 7.2 - HIGH 2019-12-26 2023-01-20
CVE-2019-15692 json TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder... 7.2 - HIGH 2019-12-26 2022-12-22
CVE-2019-15691 json TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory... 7.2 - HIGH 2019-12-26 2022-11-09
CVE-2017-7396 json In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the ... 7.5 - HIGH 2017-04-01 2019-10-03

Known software with vulnerabilities from Tigervnc

Type Vendor Product Version
ApplicationTigervncTigervnc-