Affected: AlmaLinux:9: tigervnc, AlmaLinux:9: tigervnc-icons, AlmaLinux:9: tigervnc-license, AlmaLinux:9: tigervnc-selinux, AlmaLinux:9: tigervnc-server, AlmaLinux:9: tigervnc-server-minimal, AlmaLinux:9: tigervnc-server-module

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

Affected: openEuler:22.03-LTS-SP4: tigervnc, openEuler:24.03-LTS: tigervnc, openEuler:24.03-LTS-SP1: tigervnc, openEuler:24.03-LTS-SP2: tigervnc, openEuler:24.03-LTS-SP3: tigervnc, openEuler:20.03-LTS-SP4: tigervnc

This package provides client for Virtual Network Computing (VNC), with which you can access any other desktops running a VNC server. Security Fix(es):

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.(CVE-2026-34352)

libXvnc-devel-1.16.1-2.1 on GA media

xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing. xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions

Security update for tigervnc

Affected: Ubuntu:18.04:LTS: tigervnc, Ubuntu:Pro:20.04:LTS: tigervnc, Ubuntu:22.04:LTS: tigervnc, Ubuntu:24.04:LTS: tigervnc, Ubuntu:25.10: tigervnc, Ubuntu:26.04:LTS: tigervnc

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

Ein lokaler Angreifer kann eine Schwachstelle in tigervnc ausnutzen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.