Skip to main content

Tigervnc EUVDEUVD-2026-16468

| CVE-2026-34352 HIGH
Incorrect Permission Assignment for Critical Resource (CWE-732)
2026-03-26 mitre GHSA-4vj5-vh2w-8g5j
Denial Of Service Tigervnc
8.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.5 HIGH
AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
SUSE
HIGH
qualitative
Red Hat
6.3 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
Low
Availability
Low

Lifecycle Timeline

6
Analysis Updated
Apr 16, 2026 - 06:13 EUVD-patch-fix
executive_summary
Re-analysis Queued
Apr 16, 2026 - 05:29 backfill_euvd_patch
patch_released
Patch available
Apr 16, 2026 - 05:29 EUVD
1.16.2
EUVD ID Assigned
Mar 26, 2026 - 23:01 euvd
EUVD-2026-16468
Analysis Generated
Mar 26, 2026 - 23:01 vuln.today
CVE Published
Mar 26, 2026 - 22:30 nvd
HIGH 8.5

DescriptionCVE.org

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

AnalysisAI

TigerVNC x0vncserver versions prior to 1.16.2 expose screen contents to unauthorized local users through incorrect file permissions in Image.cxx, enabling information disclosure, screen manipulation, or denial of service. The vulnerability has CVSS 8.5 (High) with local attack vector requiring no privileges or user interaction, and scope change indicating potential impact beyond the vulnerable component. No public exploit identified at time of analysis, though technical details are available via GitHub commit and mailing list disclosure.

Technical ContextAI

TigerVNC is an open-source VNC (Virtual Network Computing) implementation providing remote desktop capabilities. The vulnerability resides in Image.cxx within the x0vncserver component, which is responsible for screen sharing on X11 systems. The affected product is identified via CPE cpe:2.3:a:tigervnc:tigervnc:*:*:*:*:*:*:*:* for all versions prior to 1.16.2. The root cause is CWE-732 (Incorrect Permission Assignment for Critical Resource), meaning the software sets overly permissive access controls on resources handling screen data. This fundamental permission flaw allows local users who should not have access to read, modify, or disrupt screen sharing sessions managed by x0vncserver.

RemediationAI

Upgrade TigerVNC to version 1.16.2 or later, available at https://sourceforge.net/projects/tigervnc/files/stable/1.16.2 and announced via https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI. The specific fix is documented in GitHub commit 0b5cab169d847789efa54459a87659d3fd484393. Until patching is feasible, mitigate risk by restricting x0vncserver usage to trusted single-user systems, implementing operating system-level access controls to limit local user access to x0vncserver processes and related files, or disabling x0vncserver entirely on multi-user systems where screen sharing is not essential. Review file permissions on TigerVNC runtime directories to ensure unauthorized users cannot access screen buffer or configuration files.

More in Tigervnc

View all
CVE-2016-10207 HIGH POC
7.5 Feb 28

The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by te
CVE-2019-15695 HIGH POC
7.2 Dec 26

TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readS
CVE-2019-15694 HIGH POC
7.2 Dec 26

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::dec
CVE-2019-15693 HIGH POC
7.2 Dec 26

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Ra
CVE-2019-15692 HIGH POC
7.2 Dec 26

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Rated high severity (CVSS 7.2), this vulnerabili
CVE-2019-15691 HIGH POC
7.2 Dec 26

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack m
CVE-2017-5581 CRITICAL
9.8 Feb 28

Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execut
CVE-2014-8241 CRITICAL
9.8 Dec 14

XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging fail
CVE-2017-7393 HIGH
8.8 Apr 01

In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leadi
CVE-2020-26117 HIGH
8.1 Sep 27

In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exception
CVE-2023-6377 HIGH
7.8 Dec 13

A flaw was found in xorg-server. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Out-o
CVE-2023-6478 HIGH
7.5 Dec 13

A flaw was found in xorg-server. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authenti

Same weakness CWE-732 – Incorrect Permission Assignment for Critical Resource

View all
CVE-2017-9462 HIGH POC
8.8
CVE-2017-3006 HIGH POC
8.8
CVE-2017-9602 CRITICAL POC
9.8
CVE-2022-22960 HIGH POC
7.8
CVE-2021-38085 HIGH POC
7.8
CVE-2021-35449 HIGH POC
7.8
CVE-2020-11855 HIGH POC
7.8
CVE-2020-10883 HIGH POC
7.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: High
Product Status
Container suse/sl-micro/6.0/base-os-container:latest Container suse/sl-micro/6.1/base-os-container:2.2.1-5.112 Image SL-Micro Image SL-Micro-Base Image SL-Micro-Base-RT Image SL-Micro-Base-RT-SelfInstall Image SL-Micro-Base-RT-encrypted Image SL-Micro-Base-SelfInstall Image SL-Micro-Base-encrypted Image SL-Micro-Base-qcow Image SL-Micro-Default Image SL-Micro-Default-SelfInstall Image SL-Micro-Default-encrypted Image SL-Micro-Default-qcow Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE Affected
Image SLES15-SP6-SAP-Azure-LI-BYOS Image SLES15-SP6-SAP-Azure-LI-BYOS-Production Image SLES15-SP6-SAP-Azure-VLI-BYOS Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production Affected
SUSE Linux Enterprise Desktop 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS Fixed

Share

EUVD-2026-16468 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy