libvncserver project records

12 published records for vendor libvncserver project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 91.7%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

12 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2018-7225No exploit	An issue was discovered in LibVNCServer through 0.9.11.libvncserver project · libvncserver · CWE-190 Pre-auth Memory safety	Critical9.8	—	6.1%	Feb 19, 2018
40Plan	CVE-2016-9942No exploit	Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (appllibvncserver project · libvncserver · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	3.7%	Dec 31, 2016
40Plan	CVE-2016-9941No exploit	Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (alibvncserver project · libvncserver · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	3.7%	Dec 31, 2016
40Plan	CVE-2017-18922No exploit	It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames.libvncserver project · libvncserver · CWE-787 Pre-auth Memory safety	Critical9.8	—	2.3%	Jun 30, 2020
31Monitor	CVE-2010-5304No exploit	A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message.libvncserver project · libvncserver · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	3.1%	Feb 5, 2020
31Monitor	CVE-2020-14400No exploit	An issue was discovered in LibVNCServer before 0.9.13.libvncserver project · libvncserver Pre-auth Denial of service	High7.5	—	2.8%	Jun 17, 2020
31Monitor	CVE-2020-14399No exploit	An issue was discovered in LibVNCServer before 0.9.13.libvncserver project · libvncserver Pre-auth Denial of service	High7.5	—	2.8%	Jun 17, 2020
30Monitor	CVE-2020-25708No exploit	A divide by zero issue was found to occur in libvncserver-0.9.12.libvncserver project · libvncserver · CWE-369 Pre-auth Denial of service	High7.5	—	1.6%	Nov 27, 2020
30Monitor	CVE-2020-29260No exploit	libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().libvncserver project · libvncserver · CWE-400 Pre-auth Denial of service	High7.5	—	1.1%	Sep 2, 2022
27Monitor	CVE-2026-32854No exploit	LibVNCServer httpd proxy NULL Pointer Dereferencelibvncserver project · libvncserver · CWE-476 Pre-auth Memory safety	Medium6.3	—	5.3%	Mar 24, 2026
27Monitor	CVE-2020-14401No exploit	An issue was discovered in LibVNCServer before 0.9.13.libvncserver project · libvncserver · CWE-190 Pre-auth Memory safety	Medium6.5	—	2.5%	Jun 17, 2020
27Monitor	CVE-2026-32853No exploit	LibVNCServer UltraZip Encoding Heap Out-of-bounds Readlibvncserver project · libvncserver · CWE-125 Pre-auth Memory safety	Medium6.9	—	0.4%	Mar 24, 2026

CVE-2018-7225
41Plan
An issue was discovered in LibVNCServer through 0.9.11.
CriticalCVSS 9.8No exploitEPSS 6%
- Pre-auth
- Memory safety
libvncserver project · libvncserverFeb 19, 2018
CVE-2016-9942
40Plan
Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (appl
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
- Memory safety
libvncserver project · libvncserverDec 31, 2016
CVE-2016-9941
40Plan
Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (a
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
- Memory safety
libvncserver project · libvncserverDec 31, 2016
CVE-2017-18922
40Plan
It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
libvncserver project · libvncserverJun 30, 2020
CVE-2010-5304
31Monitor
A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message.
HighCVSS 7.5No exploitEPSS 3%
libvncserver project · libvncserverFeb 5, 2020
CVE-2020-14400
31Monitor
An issue was discovered in LibVNCServer before 0.9.13.
HighCVSS 7.5No exploitEPSS 3%
- Pre-auth
- Denial of service
libvncserver project · libvncserverJun 17, 2020
CVE-2020-14399
31Monitor
An issue was discovered in LibVNCServer before 0.9.13.
HighCVSS 7.5No exploitEPSS 3%
- Pre-auth
- Denial of service
libvncserver project · libvncserverJun 17, 2020
CVE-2020-25708
30Monitor
A divide by zero issue was found to occur in libvncserver-0.9.12.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
libvncserver project · libvncserverNov 27, 2020
CVE-2020-29260
30Monitor
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
libvncserver project · libvncserverSep 2, 2022
CVE-2026-32854
27Monitor
LibVNCServer httpd proxy NULL Pointer Dereference
MediumCVSS 6.3No exploitEPSS 5%
- Pre-auth
- Memory safety
libvncserver project · libvncserverMar 24, 2026
CVE-2020-14401
27Monitor
An issue was discovered in LibVNCServer before 0.9.13.
MediumCVSS 6.5No exploitEPSS 2%
- Pre-auth
- Memory safety
libvncserver project · libvncserverJun 17, 2020
CVE-2026-32853
27Monitor
LibVNCServer UltraZip Encoding Heap Out-of-bounds Read
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- Memory safety
libvncserver project · libvncserverMar 24, 2026