[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fASNu95vv-S59uKOsce5U7ABReCjhPb0rWMkkj4MhNGY":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":18,"kevVulnerabilities":77,"topProductsByCves":78,"seoMetadata":80,"meta":89},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":10,"lastCveUpdate":12,"firstLetter":13,"products":14,"description":17},31947,"tightvnc",1,11,0,"2023-04-12","t",[15],{"id":16,"product_name":8,"version_count":10,"cve_count":10,"kev_count":11,"last_cve_update":12},163306,"Tightvnc is a technology vendor with 1 tracked product and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[19,28,35,39,43,49,54,59,66,71],{"cveId":20,"description":21,"publishedDate":22,"cvssScore":23,"cvssVersion":24,"severity":25,"isKev":26,"epssScore":27},"CVE-2019-8287","TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.","2019-10-29",9.8,"v3.1","Critical",false,0.19461,{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":33,"severity":25,"isKev":26,"epssScore":34},"CVE-2009-0388","Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp.","2009-02-04",10,"v2",0.13334,{"cveId":36,"description":37,"publishedDate":22,"cvssScore":23,"cvssVersion":24,"severity":25,"isKev":26,"epssScore":38},"CVE-2019-15678","TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via network connectivity.",0.12805,{"cveId":40,"description":41,"publishedDate":22,"cvssScore":23,"cvssVersion":24,"severity":25,"isKev":26,"epssScore":42},"CVE-2019-15679","TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.",0.11842,{"cveId":44,"description":45,"publishedDate":22,"cvssScore":46,"cvssVersion":24,"severity":47,"isKev":26,"epssScore":48},"CVE-2019-15680","TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity.",7.5,"High",0.02669,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":46,"cvssVersion":33,"severity":47,"isKev":26,"epssScore":53},"CVE-2002-1336","TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.","2002-12-11",0.02404,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":23,"cvssVersion":24,"severity":25,"isKev":26,"epssScore":58},"CVE-2021-42785","Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a crafted FramebufferUpdate packet from a VNC server.","2021-11-23",0.02342,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":33,"severity":64,"isKev":26,"epssScore":65},"CVE-2002-1511","The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.","2003-03-03",5,"Medium",0.01808,{"cveId":67,"description":68,"publishedDate":12,"cvssScore":69,"cvssVersion":24,"severity":25,"isKev":26,"epssScore":70},"CVE-2023-27830","TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account.",9,0.01078,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":33,"severity":64,"isKev":26,"epssScore":76},"CVE-2002-0971","Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the \"Add new clients\" dialogue box.","2002-09-24",4.6,0.00396,[],[79],{"id":16,"product_name":8,"version_count":10,"cve_count":10,"kev_count":11,"last_cve_update":12},{"title":81,"metaDescription":82,"keywords":83,"structuredData":84},"Tightvnc - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Tightvnc covering 1 product with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Tightvnc vulnerabilities, Tightvnc security, Tightvnc CVE, Tightvnc threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":85,"@type":86,"name":87,"description":82,"url":88},"https:\u002F\u002Fschema.org","Organization","Tightvnc","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftightvnc",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":90,"apiVersion":91},"2026-10-20T04:34:25.108Z","3.0"]