What’s Vulnerable › Vulnerabilities

CVE-2024-42049

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-07-28 · updated 2026-06-17
• Weakness: CWE-200

Description

TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection.

Affected products

• Kaspersky TightVNC: before 2.8.84 — fixed in 2.8.84

How to fix

Upgrade to a fixed version: Kaspersky TightVNC 2.8.84. Check the vendor advisory for mitigations.

References

• https://sourceforge.net/p/vnc-tight/bugs/1629/
• https://www.tightvnc.com/whatsnew.php
• https://sourceforge.net/p/vnc-tight/bugs/1629/
• https://www.tightvnc.com/whatsnew.php

Get alerted when CVE-2024-42049 or the next vulnerability affects your stack