PT-2026-28618 · Tigervnc+1 · Tigervnc+1

Cendioossman · Publicado 2026-03-26 · Atualizado 2026-06-04 · CVE-2026-34352

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TigerVNC versions prior to 1.16.2

Description The software contains a flaw in the Image.cxx file within the x0vncserver component. Incorrect permissions allow other users to potentially observe or manipulate the screen content, or cause the application to crash.

Recommendations Update TigerVNC to version 1.16.2 or later.

Exploit

Correção

DoS

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

ALSA-2026:10739

ALSA-2026:13414

CVE-2026-34352

MGASA-2026-0088

OPENSUSE-SU-2026:10470-1

OPENSUSE-SU-2026:20465-1

RHSA-2026:10739

RHSA-2026:13414

RHSA-2026:19342

RHSA-2026:24341

SUSE-SU-2026:1252-1

SUSE-SU-2026:1301-1

SUSE-SU-2026:1302-1

SUSE-SU-2026:1303-1

SUSE-SU-2026:1360-1

SUSE-SU-2026:21140-1

Produtos afetados

Rocky Linux

Tigervnc

Referências · 58

• 🔥 https://github.com/TigerVNC/tigervnc/issues/2079 · Exploit
• https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393 · Correção
• https://twitter.com/CVEnew/status/2037513414453424147 · Publicação no Twitter
• https://osv.dev/vulnerability/SUSE-SU-2026:1302-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-34352 · Nota de Segurança
• https://ubuntu.com/security/CVE-2026-34352 · Aviso do Fabricante
• https://bugzilla.redhat.com/2451109 · Nota
• https://openwall.com/lists/oss-security/2026/03/26/7 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-34352 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2026/suse-su-20261303-1 · Nota
• https://bugzilla.redhat.com/2451113 · Nota
• https://suse.com/support/update/announcement/2026/suse-su-202621140-1 · Nota
• https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI · Correção
• https://suse.com/support/update/announcement/2026/suse-su-20261252-1 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-34352 · Aviso do Fabricante