What’s Vulnerable › Products

LibVNCServer vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your LibVNCServer version is affected

Latest LibVNCServer vulnerabilities

• CVE-2026-50538 — libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write (CVSS 8.8)
• CVE-2026-44988 — LibVNCClient Tight Gradient decoding allows malicious server-triggered heap/stack OOB writes (CVSS 8.8)
• CVE-2026-32854 — LibVNCServer httpd proxy NULL Pointer Dereference (CVSS 7.5)
• CVE-2026-32853 — LibVNCServer UltraZip Encoding Heap Out-of-bounds Read (CVSS 8.1)
• CVE-2019-15690 — (CVSS 8.8)
• CVE-2020-29260 — (CVSS 7.5)
• CVE-2020-25708 — (CVSS 7.5)
• CVE-2017-18922 — (CVSS 9.8)
• CVE-2020-14401 — (CVSS 6.5)
• CVE-2020-14400 — (CVSS 7.5)
• CVE-2020-14399 — (CVSS 7.5)
• CVE-2010-5304 — (CVSS 7.5)
• CVE-2018-7225 — (CVSS 9.8)
• CVE-2016-9942 — (CVSS 9.8)
• CVE-2016-9941 — (CVSS 9.8)