uvnc records

39 published records for vendor uvnc.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

39 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2019-8274No exploit	UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentiallyuvnc · ultravnc · CWE-122 Pre-auth Memory safety	Critical9.8	—	8.2%	Mar 8, 2019
41Plan	CVE-2019-8271No exploit	UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially resuluvnc · ultravnc · CWE-122 Pre-auth Memory safety	Critical9.8	—	8.2%	Mar 8, 2019
41Plan	CVE-2019-8273No exploit	UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentialuvnc · ultravnc · CWE-122 Pre-auth Memory safety	Critical9.8	—	8.2%	Mar 8, 2019
40Plan	CVE-2019-8262No exploit	UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execuvnc · ultravnc · CWE-122 Pre-auth Memory safety	Critical9.8	—	4.8%	Mar 5, 2019
40Plan	CVE-2019-8258No exploit	UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution.uvnc · ultravnc · CWE-122 Pre-auth Memory safety	Critical9.8	—	4.4%	Mar 5, 2019
40Plan	CVE-2019-8280No exploit	UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution.uvnc · ultravnc · CWE-788 Pre-auth	Critical9.8	—	4.2%	Mar 8, 2019
40Plan	CVE-2019-8275No exploit	UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being acuvnc · ultravnc · CWE-170 Pre-auth	Critical9.8	—	3.9%	Mar 8, 2019
40Plan	CVE-2019-8268No exploit	UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadStruvnc · ultravnc · CWE-193 Pre-auth	Critical9.8	—	3.9%	Mar 8, 2019
40Plan	CVE-2019-8272No exploit	UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution.uvnc · ultravnc · CWE-193 Pre-auth	Critical9.8	—	3.9%	Mar 8, 2019
40Plan	CVE-2019-8265No exploit	UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client codeuvnc · ultravnc · CWE-788 Pre-auth	Critical9.8	—	3.1%	Mar 8, 2019
40Plan	CVE-2019-8264No exploit	UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execuvnc · ultravnc · CWE-788 Pre-auth	Critical9.8	—	3.1%	Mar 8, 2019
40Plan	CVE-2018-15361No exploit	UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution.uvnc · ultravnc · CWE-124 Pre-auth	Critical9.8	—	2.8%	Mar 5, 2019
40Plan	CVE-2019-8266No exploit	UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer functuvnc · ultravnc · CWE-788 Pre-auth	Critical9.8	—	2.8%	Mar 8, 2019
40Plan	CVE-2019-8260No exploit	UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow.uvnc · ultravnc · CWE-125 Pre-auth Memory safety	Critical9.8	—	2.2%	Mar 5, 2019
40Plan	CVE-2019-8261No exploit	UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow.uvnc · ultravnc · CWE-125 Pre-auth Memory safety	Critical9.8	—	2.2%	Mar 5, 2019
38Monitor	CVE-2026-7840No exploit	UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)uvnc · ultravnc · CWE-787 pre-auth RCE Memory safety	Critical9.3	—	2.6%	Jul 1, 2026
36Monitor	CVE-2026-7839No exploit	UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin accessuvnc · ultravnc · CWE-798 Pre-auth Hard-coded credentials	Critical9.1	—	0.6%	Jul 1, 2026
35Monitor	CVE-2026-7838No exploit	UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason lengthuvnc · ultravnc · CWE-190 Pre-auth Memory safety	High8.7	—	1.8%	Jul 1, 2026
32Monitor	CVE-2019-8276No exploit	UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result iuvnc · ultravnc · CWE-121 Pre-auth Memory safety Denial of service	High7.5	—	5.7%	Mar 8, 2019
32Monitor	CVE-2019-8269No exploit	UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial uvnc · ultravnc · CWE-121 Pre-auth Memory safety Denial of service	High7.5	—	5.7%	Mar 8, 2019
31Monitor	CVE-2019-8259No exploit	UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be uvnc · ultravnc · CWE-665 Pre-auth	High7.5	—	3.0%	Mar 5, 2019
31Monitor	CVE-2019-8277No exploit	UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can beuvnc · ultravnc · CWE-665 Pre-auth	High7.5	—	2.9%	Mar 8, 2019
31Monitor	CVE-2019-8267No exploit	UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service uvnc · ultravnc · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	1.9%	Mar 8, 2019
31Monitor	CVE-2019-8270No exploit	UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (Duvnc · ultravnc · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	1.9%	Mar 8, 2019
31Monitor	CVE-2022-24750No exploit	Low privilege user is able to exploit the service and gain SYSTEM privileges in UltraVNC serveruvnc · ultravnc · CWE-269 Local privilege escalation	High7.8	—	0.2%	Mar 10, 2022

CVE-2019-8274
41Plan
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially
CriticalCVSS 9.8No exploitEPSS 8%
- Pre-auth
- Memory safety
uvnc · ultravncMar 8, 2019
CVE-2019-8271
41Plan
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially resul
CriticalCVSS 9.8No exploitEPSS 8%
- Pre-auth
- Memory safety
uvnc · ultravncMar 8, 2019
CVE-2019-8273
41Plan
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potential
CriticalCVSS 9.8No exploitEPSS 8%
- Pre-auth
- Memory safety
uvnc · ultravncMar 8, 2019
CVE-2019-8262
40Plan
UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code exec
CriticalCVSS 9.8No exploitEPSS 4%
- Pre-auth
- Memory safety
uvnc · ultravncMar 5, 2019
CVE-2019-8258
40Plan
UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution.
CriticalCVSS 9.8No exploitEPSS 4%
- Pre-auth
- Memory safety
uvnc · ultravncMar 5, 2019
CVE-2019-8280
40Plan
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution.
CriticalCVSS 9.8No exploitEPSS 4%
- Pre-auth
uvnc · ultravncMar 8, 2019
CVE-2019-8275
40Plan
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being ac
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
uvnc · ultravncMar 8, 2019
CVE-2019-8268
40Plan
UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadStr
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
uvnc · ultravncMar 8, 2019
CVE-2019-8272
40Plan
UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution.
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
uvnc · ultravncMar 8, 2019
CVE-2019-8265
40Plan
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
uvnc · ultravncMar 8, 2019
CVE-2019-8264
40Plan
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code exec
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
uvnc · ultravncMar 8, 2019
CVE-2018-15361
40Plan
UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
uvnc · ultravncMar 5, 2019
CVE-2019-8266
40Plan
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer funct
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
uvnc · ultravncMar 8, 2019
CVE-2019-8260
40Plan
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
uvnc · ultravncMar 5, 2019
CVE-2019-8261
40Plan
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
uvnc · ultravncMar 5, 2019
CVE-2026-7840
38Monitor
UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Memory safety
uvnc · ultravncJul 1, 2026
CVE-2026-7839
36Monitor
UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
uvnc · ultravncJul 1, 2026
CVE-2026-7838
35Monitor
UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length
HighCVSS 8.7No exploitEPSS 1%
- Pre-auth
- Memory safety
uvnc · ultravncJul 1, 2026
CVE-2019-8276
32Monitor
UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result i
HighCVSS 7.5No exploitEPSS 5%
- Pre-auth
- Memory safety
- Denial of service
uvnc · ultravncMar 8, 2019
CVE-2019-8269
32Monitor
UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial
HighCVSS 7.5No exploitEPSS 5%
- Pre-auth
- Memory safety
- Denial of service
uvnc · ultravncMar 8, 2019
CVE-2019-8259
31Monitor
UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be
HighCVSS 7.5No exploitEPSS 3%
- Pre-auth
uvnc · ultravncMar 5, 2019
CVE-2019-8277
31Monitor
UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
uvnc · ultravncMar 8, 2019
CVE-2019-8267
31Monitor
UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
uvnc · ultravncMar 8, 2019
CVE-2019-8270
31Monitor
UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (D
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
uvnc · ultravncMar 8, 2019
CVE-2022-24750
31Monitor
Low privilege user is able to exploit the service and gain SYSTEM privileges in UltraVNC server
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
uvnc · ultravncMar 10, 2022