Latest vulnerabilities for "uvnc ultravnc"

UltraVNC UltraVNC RepeaterUltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)

Risk 86

Severity

9.3

First published (updated )

CVE-2026-7840

UltraVNC UltraVNC RepeaterUltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access

Risk 66

Severity

9.1

First published (updated )

CVE-2026-7839

UltraVNC UltraVNC ViewerUltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length

Risk 77

Severity

8.7

First published (updated )

CVE-2026-7838

UltraVNC viewerUltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing

Risk 57

Severity

7.6

First published (updated )

CVE-2026-7831

UltraVNCUltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception

Risk 56

Severity

7.4

First published (updated )

CVE-2026-7830

UltraVNC UltraVNC RepeaterUltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token

Risk 66

Severity

7.2

First published (updated )

CVE-2026-7829

UltraVNC UltraVNC RepeaterUltraVNC repeater integer overflow in win_log malloc leading to heap overflow

Risk 27

Severity

5.3

First published (updated )

CVE-2026-7828

UltraVNC UltraVNCUltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes

Risk 40

Severity

6.5

First published (updated )

CVE-2026-44040

UltraVNC UltraVNCUltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated

Risk 40

Severity

6.5

First published (updated )

CVE-2026-44041

UltraVNC RepeaterUltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check

Risk 20

Severity

3.7

First published (updated )

CVE-2026-44042

UltraVNC UltraVNCUltraVNC Service version.dll uncontrolled search path

Risk 49

Severity

6.4

EPSS

0.01%

First published (updated )

CVE-2026-4962

UltraVNC UltraVNCUltraVNC Windows Service cryptbase.dll uncontrolled search path

Risk 49

Severity

7.3

EPSS

0.01%

First published (updated )

CVE-2026-3787

UltraVNC UltraVNC LauncherUltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service

Risk 43

Severity

7.5

First published (updated )

CVE-2020-37133

UltraVNC UltraVNC LauncherUltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service

Risk 37

Severity

6.7

First published (updated )

CVE-2020-37132

Uvnc UltravncBuffer Overflow

Risk 38

Severity

6.5

First published (updated )

CVE-2019-8263

Uvnc UltravncBuffer Overflow

Risk 86

Severity

9.8

First published (updated )

CVE-2019-8258

Uvnc UltravncBuffer Overflow

Risk 43

Severity

7.5

First published (updated )

CVE-2019-8276

Uvnc UltravncUltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder,…

Risk 43

Severity

7.5

First published (updated )

CVE-2019-8270

Trending

Versions

UltraVNC UltraVNC RepeaterUltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)

UltraVNC UltraVNC RepeaterUltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access

UltraVNC UltraVNC ViewerUltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length

UltraVNC viewerUltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing

UltraVNCUltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception

Don't miss critical vulnerabilities

UltraVNC UltraVNC RepeaterUltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token

UltraVNC UltraVNC RepeaterUltraVNC repeater integer overflow in win_log malloc leading to heap overflow

UltraVNC UltraVNCUltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes

UltraVNC UltraVNCUltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated

UltraVNC RepeaterUltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check

Don't miss critical vulnerabilities

UltraVNC UltraVNCUltraVNC Service version.dll uncontrolled search path

UltraVNC UltraVNCUltraVNC Windows Service cryptbase.dll uncontrolled search path

UltraVNC UltraVNC LauncherUltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service

UltraVNC UltraVNC LauncherUltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service

Uvnc UltravncBuffer Overflow

Don't miss critical vulnerabilities

Uvnc UltravncBuffer Overflow

Uvnc UltravncBuffer Overflow

Uvnc UltravncUltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder,…

Company

Resources

Contact