CVE-2026-34352

Опубликовано: 26 мар. 2026

Источник: nvd

CVSS3: 8.5

CVSS3: 9.8

EPSS Низкий

Описание

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

Ссылки

https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393
Patch
https://github.com/TigerVNC/tigervnc/issues/2079
https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI
Mailing List
Patch
https://sourceforge.net/projects/tigervnc/files/stable/1.16.2
Release Notes
https://www.openwall.com/lists/oss-security/2026/03/26/7
Mailing List
Third Party Advisory
https://github.com/TigerVNC/tigervnc/issues/2079

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tigervnc:tigervnc:*:*:*:*:*:*:*:*

Версия до 1.16.2 (исключая)

EPSS

Процентиль: 16%

0.00247

Низкий

8.5 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVE-2026-34352

CVSS3: 8.5

ubuntu

6 месяцев назад

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

CVE-2026-34352

CVSS3: 6.3

redhat

6 месяцев назад

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

CVE-2026-34352

CVSS3: 8.5

debian

6 месяцев назад

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users ...

openSUSE-SU-2026:20465-1

suse-cvrf

6 месяцев назад

Security update for tigervnc

SUSE-SU-2026:1360-1

suse-cvrf

5 месяцев назад

Security update for tigervnc

EPSS

Процентиль: 16%

0.00247

Низкий

8.5 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-732