p PatchFirst

CVE-2026-34352

CVE-2026-34352

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

CVSS 8.5 · High · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • tigervnc

    Versions
    • ≥ 0, < 1.16.2: Affected (semver)

    Update to 1.16.2

  • tigervnc Debian:12

    Versions
    • 1.12.0+dfsg-8
    • 1.13.1+dfsg-1
    • 1.13.1+dfsg-2
    • 1.13.1+dfsg-3
    • 1.14.1+dfsg-1
    • 1.15.0+dfsg-1
    • 1.15.0+dfsg-2
    • 1.15.0+dfsg-2.1
    • 1.15.0+dfsg-2.1~deb13u1
    • 1.15.0+dfsg-2.2
    • 1.16.2+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tigervnc Debian:13

    Versions
    • 1.15.0+dfsg-2
    Affected ranges
    • ECOSYSTEM: < 1.15.0+dfsg-2.1~deb13u1

    Update to 1.15.0+dfsg-2.1~deb13u1

  • tigervnc Debian:14

    Versions
    • 1.15.0+dfsg-2
    • 1.15.0+dfsg-2.1~deb13u1
    Affected ranges
    • ECOSYSTEM: < 1.15.0+dfsg-2.1

    Update to 1.15.0+dfsg-2.1

  • tigervnc Ubuntu:18.04:LTS

    Versions
    • 1.7.0+dfsg-7ubuntu1
    • 1.7.0+dfsg-8ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tigervnc Ubuntu:Pro:20.04:LTS

    Versions
    • 1.9.0+dfsg-3
    • 1.9.0+dfsg-4
    • 1.10.1+dfsg-1
    • 1.10.1+dfsg-2
    • 1.10.1+dfsg-3
    • 1.10.1+dfsg-3ubuntu0.1+esm2
    • 1.10.1+dfsg-3ubuntu0.20.04.1
    • 1.10.1+dfsg-3ubuntu0.20.04.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tigervnc Ubuntu:22.04:LTS

    Versions
    • 1.11.0+dfsg-2ubuntu1
    • 1.12.0+dfsg-2
    • 1.12.0+dfsg-3
    • 1.12.0+dfsg-4
    • 1.12.0+dfsg-4ubuntu0.22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tigervnc Ubuntu:24.04:LTS

    Versions
    • 1.12.0+dfsg-8
    • 1.13.1+dfsg-1
    • 1.13.1+dfsg-2
    • 1.13.1+dfsg-2build1
    • 1.13.1+dfsg-2build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tigervnc Ubuntu:25.10

    Versions
    • 1.14.1+dfsg-1
    • 1.15.0+dfsg-1
    • 1.15.0+dfsg-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tigervnc Ubuntu:26.10

    Versions
    • 1.15.0+dfsg-2build1
    • 1.15.0+dfsg-2.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tigervnc Ubuntu:26.04:LTS

    Versions
    • 1.15.0+dfsg-2
    • 1.15.0+dfsg-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →