In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
CVSS Details
- CVSS 3.1 Base Score: 8.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-selinuxUpgrade tigervncUpgrade tigervnc-license | Apr 29, 2026 | Apr 27, 2026 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-server-module | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervnc-licenseUpgrade tigervnc-server-debuginfoUpgrade tigervncUpgrade tigervnc-debugsourceUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-selinuxUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-server-module-debuginfo | Apr 14, 2026 | Mar 26, 2026 |
| Debian | — | Upgrade tigervnc | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade tigervnc | Apr 28, 2026 | Mar 26, 2026 |
| Redhat_linux | — | Upgrade tigervnc-selinuxUpgrade tigervnc-server-appletUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade tigervnc-licenseUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-debugsourceUpgrade tigervnc-server-debuginfoUpgrade tigervnc-icons | Apr 29, 2026 | Mar 26, 2026 |
| Rocky_linux | — | Upgrade tigervnc-server-moduleUpgrade tigervncUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-debugsourceUpgrade tigervnc-server-minimalUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-debuginfo | Apr 29, 2026 | Apr 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub