Most recent entries from all

ALSA-2026:10739 — Important: tigervnc security update

Affected: AlmaLinux:9: tigervnc, AlmaLinux:9: tigervnc-icons, AlmaLinux:9: tigervnc-license, AlmaLinux:9: tigervnc-selinux, AlmaLinux:9: tigervnc-server, AlmaLinux:9: tigervnc-server-minimal, AlmaLinux:9: tigervnc-server-module

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

EUVD-2026-324636

fkie_cve-2026-34352

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

GHSA-4vj5-vh2w-8g5j

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

OESA-2026-1830 — tigervnc security update

Affected: openEuler:22.03-LTS-SP4: tigervnc, openEuler:24.03-LTS: tigervnc, openEuler:24.03-LTS-SP1: tigervnc, openEuler:24.03-LTS-SP2: tigervnc, openEuler:24.03-LTS-SP3: tigervnc, openEuler:20.03-LTS-SP4: tigervnc

This package provides client for Virtual Network Computing (VNC), with which you can access any other desktops running a VNC server. Security Fix(es):

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.(CVE-2026-34352)

openSUSE-SU-2026:10470-1 — libXvnc-devel-1.16.1-2.1 on GA media

libXvnc-devel-1.16.1-2.1 on GA media

RHSA-2026:20575 — Red Hat Security Advisory: tigervnc security update

xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing. xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions

SUSE-SU-2026:1252-1 — Security update for tigervnc

Security update for tigervnc

UBUNTU-CVE-2026-34352

Affected: Ubuntu:18.04:LTS: tigervnc, Ubuntu:Pro:20.04:LTS: tigervnc, Ubuntu:22.04:LTS: tigervnc, Ubuntu:24.04:LTS: tigervnc, Ubuntu:25.10: tigervnc, Ubuntu:26.04:LTS: tigervnc

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

WID-SEC-W-2026-0888 — tigervnc: Schwachstelle ermöglicht Offenlegung von Informationen, Manipulation von Dateien, und Denial of Service

Ein lokaler Angreifer kann eine Schwachstelle in tigervnc ausnutzen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.