Known vulnerabilities in TigerVNC

Known vulnerabilities in TigerVNC

Vendor: tigervnc.org

Software: TigerVNC

Software CPE: cpe:2.3:a:tigervnc.org:tigervnc:*:*:*:*:*:*:*:*

Website: https://tigervnc.org/

Total vulnerabilities: 14

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU47533 - Improper Certificate Validation CVE-2020-26117	CWE-295	Medium	No	No	1.11.0	27.09.2020	SB2020101313 SB2020101314 SB2020110601 and 4 more
#VU23908 - Out-of-bounds write CVE-2019-15695	CWE-787	High	No	No	1.10.1	03.01.2020	SB2019010302 SB2020012112 SB2020093045 and 4 more
#VU23907 - Heap-based Buffer Overflow CVE-2019-15693	CWE-122	High	No	No	1.10.1	03.01.2020	SB2019010302 SB2020012112 SB2020093045 and 3 more
#VU23906 - Out-of-bounds write CVE-2019-15692	CWE-787	High	No	No	1.10.1	03.01.2020	SB2019010302 SB2020012112 SB2020093045 and 4 more
#VU23905 - Operation on a Resource after Expiration or Release CVE-2019-15691	CWE-672	High	No	No	1.10.1	03.01.2020	SB2019010302 SB2020012112 SB2020093045 and 4 more
#VU23903 - Heap-based Buffer Overflow CVE-2019-15694	CWE-122	High	No	No	1.10.1	03.01.2020	SB2019010302 SB2020012112 SB2020093045 and 4 more
#VU30474 - Improper Control of Generation of Code ('Code Injection') CVE-2014-0011	CWE-94	High	No	No	1.3.1	02.01.2020	SB2020010214 SB2015080407 SB2014110505
#VU39304 - Missing release of memory after effective lifetime CVE-2017-7392	CWE-401	Medium	No	No	-	01.04.2017	SB2017040102 SB2017040416 SB2017040417 and 1 more
#VU39305 - Double Free CVE-2017-7393	CWE-415	High	No	No	-	01.04.2017	SB2017040102 SB2017040416 SB2017040417 and 1 more
#VU39306 - Improper input validation CVE-2017-7394	CWE-20	Medium	No	No	-	01.04.2017	SB2017040102 SB2017040416 SB2017040417 and 1 more
#VU39307 - Integer overflow CVE-2017-7395	CWE-190	Medium	No	No	-	01.04.2017	SB2017040102 SB2017040416 SB2017040417 and 1 more
#VU39308 - Missing release of memory after effective lifetime CVE-2017-7396	CWE-401	Medium	No	No	-	01.04.2017	SB2017040102 SB2017040416 SB2017040417 and 1 more
#VU41208 - Heap-based Buffer Overflow CVE-2014-8240	CWE-122	Medium	No	No	-	16.10.2014	SB2014101610
#VU45014 - Improper input validation CVE-2011-1775	CWE-20	Medium	No	No	-	26.05.2011	SB2011052605