Skip to content
Noroxi

TigerVNC records

30 published records for vendor tigervnc.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 19
  4. 20
  5. 23
  6. 24
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

30 records
  • CVE-2017-5581
    40Plan

    Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via

    CriticalCVSS 9.8No exploitEPSS 4%

    tigervnc · tigervncFeb 28, 2017

  • CVE-2014-8241
    40Plan

    XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a mallo

    CriticalCVSS 9.8No exploitEPSS 3%

    tigervnc · tigervncDec 14, 2016

  • CVE-2014-0011
    40Plan

    Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled

    CriticalCVSS 9.8No exploitEPSS 2%

    tigervnc · tigervncJan 2, 2020

  • CVE-2026-34352
    39Monitor

    In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application

    CriticalCVSS 9.8No exploitEPSS 0%

    tigervnc · tigervncMar 26, 2026

  • CVE-2017-7393
    36Monitor

    In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of serv

    HighCVSS 8.8No exploitEPSS 1%

    tigervnc · tigervncMar 31, 2017

  • CVE-2020-26117
    33Monitor

    In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions.

    HighCVSS 8.1No exploitEPSS 3%

    tigervnc · tigervncSep 27, 2020

  • CVE-2014-8240
    31Monitor

    Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors

    HighCVSS 7.5No exploitEPSS 3%

    tigervnc · tigervncOct 16, 2014

  • CVE-2016-10207
    31Monitor

    The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS hand

    HighCVSS 7.5No exploitEPSS 3%

    tigervnc · tigervncFeb 28, 2017

  • CVE-2017-7396
    31Monitor

    In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.

    HighCVSS 7.5No exploitEPSS 2%

    tigervnc · tigervncMar 31, 2017

  • CVE-2017-7392
    31Monitor

    In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in t

    HighCVSS 7.5No exploitEPSS 1%

    tigervnc · tigervncMar 31, 2017

  • CVE-2023-6377
    31Monitor

    Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

    HighCVSS 7.8No exploitEPSS 1%

    redhat · enterprise linux eusDec 13, 2023

  • CVE-2025-26597
    31Monitor

    Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

    HighCVSS 7.8No exploitEPSS 0%

    x.org · x serverFeb 25, 2025

  • CVE-2025-26596
    31Monitor

    Xorg: xwayland: heap overflow in xkbwritekeysyms()

    HighCVSS 7.8No exploitEPSS 0%

    x.org · x serverFeb 25, 2025

  • CVE-2025-26595
    31Monitor

    Xorg: xwayland: buffer overflow in xkbvmodmasktext()

    HighCVSS 7.8No exploitEPSS 0%

    x.org · x serverFeb 25, 2025

  • CVE-2025-26598
    31Monitor

    Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

    HighCVSS 7.8No exploitEPSS 0%

    x.org · x serverFeb 25, 2025

  • CVE-2025-26599
    31Monitor

    Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

    HighCVSS 7.8No exploitEPSS 0%

    x.org · x serverFeb 25, 2025

  • CVE-2025-26601
    31Monitor

    Xorg: xwayland: use-after-free in syncinittrigger()

    HighCVSS 7.8No exploitEPSS 0%

    x.org · x serverFeb 25, 2025

  • CVE-2025-26600
    31Monitor

    Xorg: xwayland: use-after-free in playreleasedevents()

    HighCVSS 7.8No exploitEPSS 0%

    x.org · x serverFeb 25, 2025

  • CVE-2025-26594
    31Monitor

    X.org: xwayland: use-after-free of the root cursor

    HighCVSS 7.8No exploitEPSS 0%

    x.org · x serverFeb 25, 2025

  • CVE-2024-0409
    31Monitor

    Xorg-x11-server: selinux context corruption

    HighCVSS 7.8No exploitEPSS 0%

    x.org · x serverJan 18, 2024

  • CVE-2023-6478
    30Monitor

    Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

    HighCVSS 7.5No exploitEPSS 1%

    x.org · x serverDec 13, 2023

  • CVE-2017-7394
    30Monitor

    In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.

    HighCVSS 7.5No exploitEPSS 1%

    tigervnc · tigervncMar 31, 2017

  • CVE-2019-15692
    29Monitor

    TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow.

    HighCVSS 7.2No exploitEPSS 4%

    tigervnc · tigervncDec 26, 2019

  • CVE-2019-15691
    29Monitor

    TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder

    HighCVSS 7.2No exploitEPSS 4%

    tigervnc · tigervncDec 26, 2019

  • CVE-2019-15695
    29Monitor

    TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor.

    HighCVSS 7.2No exploitEPSS 4%

    tigervnc · tigervncDec 26, 2019