CVE-2002-1848

TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords...

TightVNC Privilege Escalation Vulnerability (Jan 2025) - Linux

TightVNC is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tightvnc:tightvnc";...

TightVNC Privilege Escalation Vulnerability (Jan 2025) - Windows

TightVNC is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tightvnc:tightvnc";...

TightVNC Information Disclosure Vulnerability (Aug 2024) - Windows

TightVNC is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tightvnc:tightvnc";...

The vulnerability of the Control Pipe Handler component in the remote access system for the TightVNC computer desktop allows a intruder to unauthorizedly connect to the control channel.

The vulnerability of the Control Pipe Handler component in the remote access system for TightVNC involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to unauthorizedly connect to the control channel through t...

CVE-2024-42049

TightVNC Server for Windows before 2.8.84 allows attackers to connect to the control pipe via a network connection...

CVE-2024-42049

TightVNC Server for Windows before 2.8.84 allows attackers to connect to the control pipe via a network connection...

CVE-2024-42049: Exposure of Sensitive Information to an Unauthorized Actor

TightVNC Server for Windows before 2.8.84 allows attackers to connect to the control pipe via a network connection...

CVE-2024-42049

TightVNC (Server for Windows) versions prior to 2.8.84 are vulnerable to a control pipe manipulation flaw. This vulnerability allows an attacker to bypass the authentication process and connect to the control channel via a network connection through the Control Pipe Handler component. Practical c...

CVE-2024-42049

TightVNC Server for Windows before 2.8.84 allows attackers to connect to the control pipe via a network connection...

TightVNC 安全漏洞

TightVNC is a cross-platform, open source remote desktop software from TightVNC Open Source. A security vulnerability exists in versions of TightVNC prior to 2.8.84. An attacker exploited the vulnerability to connect to the control pipeline via a network connection...

PT-2024-5229 · Tightvnc · Tightvnc

Name of the Vulnerable Software and Affected Versions: TightVNC Server for Windows versions prior to 2.8.84 Description: The issue is related to the Control Pipe Handler component of the TightVNC remote desktop access system, which allows attackers to bypass the authentication procedure by using ...

The vulnerability of the TightVNC remote desktop access system, related to errors in privilege management, allows a intruder to escalate their privileges.

The vulnerability of the TightVNC remote desktop access system is related to errors in privilege management. Exploiting this vulnerability allows a malicious actor to increase their privileges by replacing files…...

SUSE CVE-2023-27830

TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account...

CVE-2023-27830

TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account...

CVE-2023-27830

TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account...

Code injection

TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account...

CVE-2023-27830

TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account...

PT-2023-5726 · Tightvnc · Tightvnc

Name of the Vulnerable Software and Affected Versions: TightVNC versions prior to 2.8.75 Description: The issue is related to errors in privilege management, allowing remote attackers to escalate their privileges on the host operating system. This can be achieved by replacing legitimate files wit...

CVE-2023-27830

CVE-2023-27830 affects TightVNC prior to 2.8.75. The issue arises because TightVNC runs in the backend under a high-privileges account, permitting an attacker to escalate privileges by replacing legitimate files during a file transfer. The impact is host OS privilege escalation with high confiden...