CVE-2019-17662-Exploit

CVE-2019-17662 Description ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file th...

CVE-2019-17662

CVE-2019-17662 Description ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file th...

CVE-2026-79680

A flaw was found in the Qt VNC Server module. A remote attacker, by using a specially modified VNC client that violates the Remote Framebuffer RFB protocol, can bypass the password authentication mechanism. This allows the attacker to gain unauthorized remote access to the shared application,...

CVE-2026-79680

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

CVE-2026-79680

The Qt VNC Server module contains an authentication bypass vulnerability within its password authentication mechanism. An attacker utilizing a specially modified VNC client that violates the RFB protocol can bypass password requirements to gain unauthorized remote access to the shared application...

CVE-2026-79680 Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

EUVD-2026-85846

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

CVE-2026-79680 Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

PT-2026-97783

Name of the Vulnerable Software and Affected Versions Qt VNC Server affected versions not specified Description An authentication bypass exists in the password authentication mechanism of the Qt VNC Server module. An attacker can use a modified VNC client that violates the RFB Remote Frame Buffer...

CVE-2026-79680: Authentication Bypass Using an Alternate Path or Channel

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2026:4024-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4024-1 advisory. This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QEMU’s built-in VNC server during the processing of ClientCutText messages. The qemuclipboardrequest function can be accessed before vncservercuttextcaps is called, which gives a malicious authenticated VNC client the opportunity to initialize the clipboard peer. This...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QEMU-built-in VNC server during the processing of ClientCutText messages. A incorrect exit condition may lead to an infinite loop when inflating a zlib buffer controlled by an attacker in the inflatebuffer function. This could allow a remotely authenticated client, wh...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QEMU-built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections exceeds a certain threshold. If it does, QEMU terminates the previous connection. However, if the previous connection is still in the handshake...

Astra Linux – Vulnerability in libvncserver

A divide by zero issue was detected in libvncserver-0.9.12. A malicious client could exploit this flaw to send a specially crafted message. When this message is processed by the VNC server, it will cause a floating-point exception, resulting in a denial of service...

Security update for LibVNCServer (important)

openSUSE security update: security update for libvncserver ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21735-1 Rating: important References: bsc1276218 Cross-References: CVE-2026-50538 CVSS scores: CVE-2026-50538 SUSE : 8.8...

Security update for LibVNCServer

This update for LibVNCServer fixes the following issue: CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker- controlled data past the end of its framebuffer bsc1276218. Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2026:4024-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker- controlled data past the end of its framebuffer bsc1276218...

SUSE SLES15 Security Update : LibVNCServer (SUSE-SU-2026:3803-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3803-1 advisory. This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting libvncclie...

SUSE CVE-2026-50538

LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with...