Tightvnc vulnerabilitiesNone on the known-exploited list.
Tightvnc has 11 published vulnerabilities across 1 product in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Tightvnc, with 11. If you run Tightvnc software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Tightvnc products have the most vulnerabilities?
Tightvnc leads with 11 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Tightvnc vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Tightvnc's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Tightvnc flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 19%CVE-2019-8287Critical
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution.
- 13%CVE-2009-0388Critical
Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary...
- 13%CVE-2019-15678Critical
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution..
- 12%CVE-2019-15679Critical
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution.
- 2.7%CVE-2019-15680High
TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS).
- 2.4%CVE-2002-1336High
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
- 2.3%CVE-2021-42785Critical
Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a crafted FramebufferUpdate packet from a VNC server.
- 1.8%CVE-2002-1511Medium
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.
- 1.1%CVE-2023-27830Critical
TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer.
- 0.4%CVE-2002-0971Medium
Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box.
All Tightvnc products we track.
1 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
Running Tightvnc? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.
- Matched to
- Tightvnc on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 11 published vulnerabilities across 1 product and 11 versions from Tightvnc.
None of Tightvnc's vulnerabilities is on the list of flaws known to be exploited today.
Tightvnc, with 11 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Tightvnc products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.