Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2026-34352

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.

VectorNETWORK

PublishedMar 26, 2026, 23:16

Published Bycve@mitre.org

Base Score

Score9.8

Affected Versions

No affected versions found.

References

https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393
https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI
https://sourceforge.net/projects/tigervnc/files/stable/1.16.2
https://www.openwall.com/lists/oss-security/2026/03/26/7

Weakness Type

CWE-732

CVSS Metrics

Base Score

9.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.1

Attack Vector (AV)

NETWORK