CRITICAL9.8CVE-2026-34352In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an applicatio… from 0
CRITICAL9.8CVE-2017-5581Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code vi… from 0, < 1.7.0+dfsg-3
CRITICAL9.8CVE-2014-8241XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a mall… from 0, < 1.7.0-2
HIGH8.8In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of ser…
from 0, < 1.7.0+dfsg-7
HIGH8.1tigervnc - security update
from 0, < 1.10.1+dfsg-9
HIGH8.1tigervnc - security update
from 0, < 1.7.0+dfsg-7+deb9u2
HIGH7.5In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.
from 0, < 1.7.0+dfsg-7
HIGH7.5In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.
from 0, < 1.7.0+dfsg-7
HIGH7.5In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in…
from 0, < 1.7.0+dfsg-7
HIGH7.5The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS han…
from 0, < 1.7.0-1
HIGH7.2TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor.
from 0, < 1.10.1+dfsg-1
HIGH7.2TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect.
from 0, < 1.10.1+dfsg-1
HIGH7.2TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient.
from 0, < 1.10.1+dfsg-1
HIGH7.2TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow.
from 0, < 1.10.1+dfsg-1
HIGH7.2TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecode…
from 0, < 1.10.1+dfsg-1
MEDIUM6.5In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the ser…
from 0, < 1.7.0+dfsg-7
—Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors…
from 0, < 1.7.0-1