8.5Hoch
CVE-2026-34352
Beschreibung
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
Schwachstellentyp (CWE):
CWE-732
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://www.openwall.com/lists/oss-security/2026/03/26/7 Mailing ListThird Party Advisory
- https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393 Patch
- https://sourceforge.net/projects/tigervnc/files/stable/1.16.2 Release Notes
- https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI Mailing ListPatch
- https://github.com/TigerVNC/tigervnc/issues/2079
CPE-Treffer (NVD) (1)
cpe:2.3:a:tigervnc:tigervnc:*:*:*:*:*:*:*:*< 1.16.2