Paper/Archive/CVE-2026-34352

CVE-2026-34352

TigerVNC TigerVNC — In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an applicat…

EPSS 0.3%public exploit CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 16.7.167 × 203.3 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

Affected

ProductAffectedFixed inSource

TigerVNC< 1.16.21.16.2CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

mitre (CNA)8.5CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refopenwall.com/lists/oss-security/2026/03/26/7 refgithub.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393 refsourceforge.net/projects/tigervnc/files/stable/1.16.2 refgroups.google.com/g/tigervnc-announce/c/anHL9WLshLI exploitgithub.com/TigerVNC/tigervnc/issues/2079