PT-2026-28618 · Tigervnc+1 · Tigervnc+1

Cendioossman · Published 2026-03-26 · Updated 2026-05-04 · CVE-2026-34352

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TigerVNC versions prior to 1.16.2

Description The software contains a flaw in the Image.cxx file within the x0vncserver component. Incorrect permissions allow other users to potentially observe or manipulate the screen content, or cause the application to crash.

Recommendations Update TigerVNC to version 1.16.2 or later.

Fix

DoS

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

ALSA-2026:10739

ALSA-2026:13414

CVE-2026-34352

MGASA-2026-0088

OPENSUSE-SU-2026:10470-1

OPENSUSE-SU-2026:20465-1

RHSA-2026:10739

RHSA-2026:13414

RHSA-2026:19342

SUSE-SU-2026:1252-1

SUSE-SU-2026:1301-1

SUSE-SU-2026:1302-1

SUSE-SU-2026:1303-1

SUSE-SU-2026:1360-1

SUSE-SU-2026:21140-1

Affected Products

Rocky Linux

Tigervnc

References · 56

• https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393 · Patch
• https://cve.org/CVERecord?id=CVE-2026-34352 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-34352 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1252-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:13414 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34352 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-13414.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20465-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1302-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1303-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:10739 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10470-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2026-0088 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-34352 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-10739.html · Vendor Advisory