In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
CVSS Details
- CVSS 3.1 Base Score: 8.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervnc-licenseUpgrade tigervncUpgrade tigervnc-selinux | Apr 29, 2026 | Apr 27, 2026 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-licenseUpgrade tigervnc-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimalUpgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-server-module | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervncUpgrade tigervnc-licenseUpgrade tigervnc-debugsourceUpgrade tigervnc-server-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-debuginfoUpgrade tigervnc-icons | Apr 14, 2026 | Mar 26, 2026 |
| Debian | — | Upgrade tigervnc | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade tigervncUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervnc-icons | Apr 28, 2026 | Mar 26, 2026 |
| Redhat_linux | — | Upgrade tigervncUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-selinuxUpgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade tigervnc-server-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-debugsource | Apr 29, 2026 | Mar 26, 2026 |
| Rocky_linux | — | Upgrade tigervnc-debugsourceUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervnc-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc | Apr 29, 2026 | Apr 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub