realvnc records
6 published records for vendor realvnc.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 16.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation3
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-269 Improper Privilege Management1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2008-4770No exploit | The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 throughrealvnc · realvnc · CWE-20 | Critical10.0 | — | 4.0% | Jan 16, 2009 |
31Monitor | CVE-2022-27502Proof of concept | RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% frealvnc · vnc server | High7.8 | — | 0.6% | Jun 10, 2022 |
31Monitor | CVE-2022-41975No exploit | RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI installer Repair mode.realvnc · vnc server · CWE-269 | High7.8 | — | 0.1% | Sep 30, 2022 |
28Monitor | CVE-2013-6886No exploit | RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to the (1) vncserver, (2) vncserrealvnc · realvnc · CWE-264 | High7.2 | — | 0.4% | Dec 28, 2013 |
26Monitor | CVE-2021-41380No exploit | RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service (application crash) via crafted RFB protocol data.realvnc · vnc viewer · CWE-20 | Medium6.5 | — | 0.9% | Sep 17, 2021 |
22Monitor | CVE-2008-3493Proof of concept | vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service (application crash) via a crafted frarealvnc · realvnc windows client · CWE-20 | Medium5.0 | — | 5.6% | Aug 6, 2008 |
- CVE-2008-477041Plan
The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through
CriticalCVSS 10.0No exploitEPSS 4%realvnc · realvncJan 16, 2009
- CVE-2022-2750231Monitor
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% f
HighCVSS 7.8Proof of conceptEPSS 0%realvnc · vnc serverJun 10, 2022
- CVE-2022-4197531Monitor
RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI installer Repair mode.
HighCVSS 7.8No exploitEPSS 0%realvnc · vnc serverSep 30, 2022
- CVE-2013-688628Monitor
RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to the (1) vncserver, (2) vncser
HighCVSS 7.2No exploitEPSS 0%realvnc · realvncDec 28, 2013
- CVE-2021-4138026Monitor
RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service (application crash) via crafted RFB protocol data.
MediumCVSS 6.5No exploitEPSS 0%realvnc · vnc viewerSep 17, 2021
- CVE-2008-349322Monitor
vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service (application crash) via a crafted fra
MediumCVSS 5.0Proof of conceptEPSS 5%realvnc · realvnc windows clientAug 6, 2008