LibVNC LibVNCServer
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-50538 | >= 0.9.12, <= 0.9.15 | libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write | HIGH 8.8 | 0.4 % | ||
| CVE-2026-44988 | <= 0.9.15 | LibVNCClient Tight Gradient decoding allows malicious server-triggered heap/stack OOB writes | HIGH 8.8 | 0.2 % | ||
| CVE-2026-32854 | ≤ 0.9.15 | LibVNCServer httpd proxy NULL Pointer Dereference | MEDIUM 6.3 | 5.4 % | ||
| CVE-2026-32853 | ≤ 0.9.15 | LibVNCServer UltraZip Encoding Heap Out-of-bounds Read | MEDIUM 6.9 | 0.4 % | ||
| CVE-2019-15690 | * – 0.9.12 | LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/ | HIGH 8.8 | 0.8 % |