TI
Vendor
TigerVNC
30
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-34352 | TI TigerVNC TigerVNC | 9.8 | Mar 26 | In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect… |
| CVE-2025-26601 | TI Tigervnc Tigervnc | 7.8 | Feb 25 | A use-after-free flaw was found in X.Org and Xwayland |
| CVE-2025-26600 | TI Tigervnc Tigervnc | 7.8 | Feb 25 | A use-after-free flaw was found in X.Org and Xwayland |
| CVE-2025-26599 | TI Tigervnc Tigervnc | 7.8 | Feb 25 | An access to an uninitialized pointer flaw was found in X.Org and Xwayland |
| CVE-2025-26598 | TI Tigervnc Tigervnc | 7.8 | Feb 25 | An out-of-bounds write flaw was found in X.Org and Xwayland |
| CVE-2025-26597 | TI Tigervnc Tigervnc | 7.8 | Feb 25 | A buffer overflow flaw was found in X.Org and Xwayland |
| CVE-2025-26596 | TI Tigervnc Tigervnc | 7.8 | Feb 25 | A heap overflow flaw was found in X.Org and Xwayland |
| CVE-2025-26595 | TI Tigervnc Tigervnc | 7.8 | Feb 25 | A buffer overflow flaw was found in X.Org and Xwayland |
| CVE-2025-26594 | TI Tigervnc Tigervnc | 7.8 | Feb 25 | A use-after-free flaw was found in X.Org and Xwayland |
| CVE-2024-0409 | TI Tigervnc Tigervnc | 7.8 | Jan 18 | A flaw was found in the X.Org server |
| CVE-2024-0408 | TI Tigervnc Tigervnc | 5.5 | Jan 18 | A flaw was found in the X.Org server |
| CVE-2023-6478 | TI Tigervnc Tigervnc | 7.5 | Dec 13 | A flaw was found in xorg-server |
| CVE-2023-6377 | TI Tigervnc Tigervnc | 7.8 | Dec 13 | A flaw was found in xorg-server |
| CVE-2020-26117 | TI Tigervnc Tigervnc | 8.1 | Sep 27 | In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions |
| CVE-2014-0011 | TI TigerVNC TigerVNC | 9.8 | Jan 2 | Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a… |
| CVE-2019-15695 | TI Tigervnc Tigervnc | 7.2 | Dec 26 | TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor |
| CVE-2019-15694 | TI Tigervnc Tigervnc | 7.2 | Dec 26 | TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect |
| CVE-2019-15693 | TI Tigervnc Tigervnc | 7.2 | Dec 26 | TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient |
| CVE-2019-15692 | TI Tigervnc Tigervnc | 7.2 | Dec 26 | TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow |
| CVE-2019-15691 | TI Tigervnc Tigervnc | 7.2 | Dec 26 | TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder |
| CVE-2017-7396 | TI Tigervnc Tigervnc | 7.5 | Apr 1 | In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server |
| CVE-2017-7395 | TI Tigervnc Tigervnc | 6.5 | Apr 1 | In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server |
| CVE-2017-7394 | TI Tigervnc Tigervnc | 7.5 | Apr 1 | In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames |
| CVE-2017-7393 | TI Tigervnc Tigervnc | 8.8 | Apr 1 | In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution |
| CVE-2017-7392 | TI Tigervnc Tigervnc | 7.5 | Apr 1 | In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server |
| CVE-2017-5581 | TI Tigervnc Tigervnc | 9.8 | Feb 28 | Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle… |
| CVE-2016-10207 | TI Tigervnc Tigervnc | 7.5 | Feb 28 | The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early |
| CVE-2014-8241 | TI Tigervnc Tigervnc | 9.8 | Dec 14 | XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return value, a similar issue to… |
| CVE-2014-8240 | TI Tigervnc Tigervnc | – | Oct 16 | Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which… |
| CVE-2011-1775 | TI Tigervnc Tigervnc | – | May 26 | The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server's X.509 certificate, which… |