Name: CVE-2026-34352: Incorrect Permission Assignment for Critical Resource
Creator: Rapid7
Published: 2026-03-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-34352, CWE-732, CVSS 8.5, EPSS 0.00419

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

CVSS Details

CVSS 3.1 Base Score: 8.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade tigervnc	Apr 29, 2026	Apr 27, 2026
Amazon Linux Ami 2	—	Upgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade tigervnc-server-minimalUpgrade tigervnc-icons	May 20, 2026	May 20, 2026
Amazon_linux_2023	—	Upgrade tigervnc-licenseUpgrade tigervncUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-server-minimal-debuginfo	Apr 14, 2026	Mar 26, 2026
Debian	—	Upgrade tigervnc	Jul 23, 2026	Jul 23, 2026
Oracle_linux	—	Upgrade tigervncUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-icons	Apr 28, 2026	Mar 26, 2026
Redhat_linux	—	Upgrade tigervnc-debugsourceUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-selinuxUpgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade tigervnc-server-module-debuginfoUpgrade tigervncUpgrade tigervnc-server-applet	Apr 29, 2026	Mar 26, 2026
Rocky_linux	—	Upgrade tigervnc-server-module-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc-debugsourceUpgrade tigervncUpgrade tigervnc-server-module	Apr 29, 2026	Apr 28, 2026

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence