TI
Product
TigerVNC
30
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 22Medium 2Low 0
Watch
Add TigerVNC to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7393 | 8.8 | Apr 1 | In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution Affected: 1.7.1 |
| CVE-2020-26117 | 8.1 | Sep 27 | In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions Affected: before 1.11.0 |
| CVE-2025-26601 | 7.8 | Feb 25 | A use-after-free flaw was found in X.Org and Xwayland Affected: All versions, or not specified |
| CVE-2025-26600 | 7.8 | Feb 25 | A use-after-free flaw was found in X.Org and Xwayland Affected: All versions, or not specified |
| CVE-2025-26599 | 7.8 | Feb 25 | An access to an uninitialized pointer flaw was found in X.Org and Xwayland Affected: All versions, or not specified |
| CVE-2025-26598 | 7.8 | Feb 25 | An out-of-bounds write flaw was found in X.Org and Xwayland Affected: All versions, or not specified |
| CVE-2025-26597 | 7.8 | Feb 25 | A buffer overflow flaw was found in X.Org and Xwayland Affected: All versions, or not specified |
| CVE-2025-26596 | 7.8 | Feb 25 | A heap overflow flaw was found in X.Org and Xwayland Affected: All versions, or not specified |
| CVE-2025-26595 | 7.8 | Feb 25 | A buffer overflow flaw was found in X.Org and Xwayland Affected: All versions, or not specified |
| CVE-2025-26594 | 7.8 | Feb 25 | A use-after-free flaw was found in X.Org and Xwayland Affected: All versions, or not specified |
| CVE-2024-0409 | 7.8 | Jan 18 | A flaw was found in the X.Org server Affected: before 1.13.1 |
| CVE-2023-6377 | 7.8 | Dec 13 | A flaw was found in xorg-server Affected: All versions, or not specified |
| CVE-2023-6478 | 7.5 | Dec 13 | A flaw was found in xorg-server Affected: All versions, or not specified |
| CVE-2017-7396 | 7.5 | Apr 1 | In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server Affected: 1.7.1 |
| CVE-2017-7394 | 7.5 | Apr 1 | In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames Affected: 1.7.1 |
| CVE-2017-7392 | 7.5 | Apr 1 | In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server Affected: 1.7.1 |
| CVE-2016-10207 | 7.5 | Feb 28 | The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early Affected: 0.0.90; 0.0.91; 1.0; 1.0.1; 1.1.0; 1.3; +2 more |
| CVE-2019-15695 | 7.2 | Dec 26 | TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor Affected: before 1.10.1 |
| CVE-2019-15694 | 7.2 | Dec 26 | TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect Affected: before 1.10.1 |
| CVE-2019-15693 | 7.2 | Dec 26 | TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient Affected: before 1.10.1 |
| CVE-2019-15692 | 7.2 | Dec 26 | TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow Affected: before 1.10.1 |
| CVE-2019-15691 | 7.2 | Dec 26 | TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder Affected: before 1.10.1 |
Showing 22