CVE-2026-107614

GlavSoft TightVNC Server for Windows versions before 2.8.88 are vulnerable to an integer underflow in the WinCursorShapeUtils::trimTransparent() function. When a cursor shape with a width or height of zero is processed on the DXGI capture path , the loop bound width - 1 wraps to 0xFFFFFFFF. This ...

EUVD-2026-94978

An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...