UL
Vendor
Ultravnc
16
CVEs
0
On KEV
0
New 30D
Products
UL9.8
UltraVNC
Ultravnc
13 CVEs0 on KEV0 new
RE7.5
Repeater
Ultravnc
1 CVEs0 on KEV0 new
TV–
Tabbed Viewer
Ultravnc
1 CVEs0 on KEV0 new
VV–
Vnc Viewer
Ultravnc
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-4962 | UL UltraVNC Ultravnc | 7.0 | Mar 27 | UltraVNC Service version.dll uncontrolled search path |
| CVE-2026-3787 | UL UltraVNC Ultravnc | 7.0 | Mar 8 | UltraVNC Windows Service cryptbase.dll uncontrolled search path |
| CVE-2018-15361 | UL UltraVNC UltraVNC | 9.8 | Mar 5 | UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution |
| CVE-2019-8258 | UL UltraVNC UltraVNC | 9.8 | Mar 5 | UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution |
| CVE-2019-8259 | UL UltraVNC UltraVNC | 7.5 | Mar 5 | UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure |
| CVE-2019-8260 | UL UltraVNC UltraVNC | 9.8 | Mar 5 | UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow |
| CVE-2019-8261 | UL UltraVNC UltraVNC | 9.8 | Mar 5 | UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow |
| CVE-2019-8262 | UL UltraVNC UltraVNC | 9.8 | Mar 5 | UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution |
| CVE-2016-5673 | RE Repeater Ultravnc | 7.5 | Aug 25 | UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in… |
| CVE-2010-5248 | UL Ultravnc Ultravnc | – | Sep 7 | Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the current working directory, as demonstrated… |
| CVE-2009-0388 | UL Ultravnc Ultravnc | – | Feb 4 | Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application… |
| CVE-2008-5001 | UL Ultravnc Ultravnc | – | Nov 10 | Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when… |
| CVE-2008-0610 | UL Ultravnc Ultravnc | – | Feb 6 | Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008,… |
| CVE-2006-2206 | UL Ultravnc Ultravnc | – | May 5 | The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing… |
| CVE-2006-1652 | TV Tabbed Viewer Ultravnc | – | Apr 6 | Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute arbitrary code via a… |