What’s Vulnerable › Vulnerabilities

CVE-2020-37133: UltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-02-05 · updated 2026-06-17
• Weakness: CWE-121

Description

UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allows attackers to crash the application. Attackers can paste an overly long string of 300 characters into the Repeater Host property to trigger an application crash.

Affected products

• Kaspersky Lab UltraVNC: through 1.2.4.0

References

• https://www.exploit-db.com/exploits/48288
• https://www.uvnc.com/
• https://www.vulncheck.com/advisories/ultravnc-launcher-repeaterhost-denial-of-service

Get alerted when CVE-2020-37133 or the next vulnerability affects your stack