← Back

CVE-2026-34352

nvd nist
Published: Mar 26, 2026Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

Affected (1)

Products: Tigervnc: Tigervnc
Tigervnc
1 product
Tigervnc
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Tigervnc
Before 1.16.2

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (6)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
Mailing ListPatch
Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.