What’s Vulnerable › Products
Kaspersky Lab UltraVNC vulnerabilities
37 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your Kaspersky Lab UltraVNC version is affected
Latest Kaspersky Lab UltraVNC vulnerabilities
- CVE-2026-7840 — UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE) (CVSS 9.8)
- CVE-2026-7839 — UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access (CVSS 9.1)
- CVE-2026-7838 — UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length (CVSS 8.8)
- CVE-2026-7831 — UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing (CVSS 7.6)
- CVE-2026-7830 — UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception (CVSS 7.4)
- CVE-2026-7829 — UltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token (CVSS 7.2)
- CVE-2026-7828 — UltraVNC repeater integer overflow in win_log malloc leading to heap overflow (CVSS 5.3)
- CVE-2026-44042 — UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check (CVSS 3.7)
- CVE-2026-44041 — UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated (CVSS 6.5)
- CVE-2026-44040 — UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes (CVSS 6.5)
- CVE-2026-4962 — UltraVNC Service version.dll uncontrolled search path (CVSS 7.0)
- CVE-2026-3787 — UltraVNC Windows Service cryptbase.dll uncontrolled search path (CVSS 7.0)
- CVE-2020-37133 — UltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service (CVSS 7.5)
- CVE-2020-37132 — UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service (CVSS 5.5)
- CVE-2022-24750 — Low privilege user is able to exploit the service and gain SYSTEM privileges in UltraVNC server (CVSS 7.8)
- CVE-2019-8280 — (CVSS 9.8)
- CVE-2019-8277 — (CVSS 7.5)
- CVE-2019-8276 — (CVSS 7.5)
- CVE-2019-8275 — (CVSS 9.8)
- CVE-2019-8274 — (CVSS 9.8)
- CVE-2019-8273 — (CVSS 9.8)
- CVE-2019-8272 — (CVSS 9.8)
- CVE-2019-8271 — (CVSS 9.8)
- CVE-2019-8270 — (CVSS 7.5)
- CVE-2019-8269 — (CVSS 7.5)