TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Microsoft
NVD
Exploit-DB
CVSS 3.1
9.1
EPSS
2.1%