İçeriğe atla
Noroxi

TigerVNC kayıtları

tigervnc üreticisine ait 30 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 19
  4. 20
  5. 23
  6. 24
  7. 25
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

30 kayıt
  • CVE-2017-5581
    40Planlayın

    Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via

    KritikCVSS 9,8İstismar yokEPSS %4

    tigervnc · tigervnc28 Şub 2017

  • CVE-2014-8241
    40Planlayın

    XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a mallo

    KritikCVSS 9,8İstismar yokEPSS %3

    tigervnc · tigervnc14 Ara 2016

  • CVE-2014-0011
    40Planlayın

    Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled

    KritikCVSS 9,8İstismar yokEPSS %2

    tigervnc · tigervnc2 Oca 2020

  • CVE-2026-34352
    39İzleyin

    In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application

    KritikCVSS 9,8İstismar yokEPSS %0

    tigervnc · tigervnc26 Mar 2026

  • CVE-2017-7393
    36İzleyin

    In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of serv

    YüksekCVSS 8,8İstismar yokEPSS %2

    tigervnc · tigervnc31 Mar 2017

  • CVE-2020-26117
    33İzleyin

    In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions.

    YüksekCVSS 8,1İstismar yokEPSS %3

    tigervnc · tigervnc27 Eyl 2020

  • CVE-2014-8240
    31İzleyin

    Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors

    YüksekCVSS 7,5İstismar yokEPSS %4

    tigervnc · tigervnc16 Eki 2014

  • CVE-2016-10207
    31İzleyin

    The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS hand

    YüksekCVSS 7,5İstismar yokEPSS %3

    tigervnc · tigervnc28 Şub 2017

  • CVE-2017-7396
    31İzleyin

    In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.

    YüksekCVSS 7,5İstismar yokEPSS %2

    tigervnc · tigervnc31 Mar 2017

  • CVE-2017-7392
    31İzleyin

    In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in t

    YüksekCVSS 7,5İstismar yokEPSS %2

    tigervnc · tigervnc31 Mar 2017

  • CVE-2023-6377
    31İzleyin

    Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

    YüksekCVSS 7,8İstismar yokEPSS %2

    redhat · enterprise linux eus13 Ara 2023

  • CVE-2025-26597
    31İzleyin

    Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · x server25 Şub 2025

  • CVE-2025-26596
    31İzleyin

    Xorg: xwayland: heap overflow in xkbwritekeysyms()

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · x server25 Şub 2025

  • CVE-2025-26595
    31İzleyin

    Xorg: xwayland: buffer overflow in xkbvmodmasktext()

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · x server25 Şub 2025

  • CVE-2025-26598
    31İzleyin

    Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · x server25 Şub 2025

  • CVE-2025-26599
    31İzleyin

    Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · x server25 Şub 2025

  • CVE-2025-26601
    31İzleyin

    Xorg: xwayland: use-after-free in syncinittrigger()

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · x server25 Şub 2025

  • CVE-2025-26600
    31İzleyin

    Xorg: xwayland: use-after-free in playreleasedevents()

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · x server25 Şub 2025

  • CVE-2025-26594
    31İzleyin

    X.org: xwayland: use-after-free of the root cursor

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · x server25 Şub 2025

  • CVE-2024-0409
    31İzleyin

    Xorg-x11-server: selinux context corruption

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · x server18 Oca 2024

  • CVE-2023-6478
    30İzleyin

    Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

    YüksekCVSS 7,5İstismar yokEPSS %2

    x.org · x server13 Ara 2023

  • CVE-2017-7394
    30İzleyin

    In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.

    YüksekCVSS 7,5İstismar yokEPSS %2

    tigervnc · tigervnc31 Mar 2017

  • CVE-2019-15692
    29İzleyin

    TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow.

    YüksekCVSS 7,2İstismar yokEPSS %5

    tigervnc · tigervnc26 Ara 2019

  • CVE-2019-15691
    29İzleyin

    TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder

    YüksekCVSS 7,2İstismar yokEPSS %5

    tigervnc · tigervnc26 Ara 2019

  • CVE-2019-15695
    29İzleyin

    TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor.

    YüksekCVSS 7,2İstismar yokEPSS %4

    tigervnc · tigervnc26 Ara 2019