PT-2026-28618 · Tigervnc+1 · Tigervnc+1

Cendioossman · CVE-2026-34352 · Published 2026-03-26 · Updated 2026-06-04

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TigerVNC versions prior to 1.16.2

Description The software contains a flaw in the Image.cxx file within the x0vncserver component. Incorrect permissions allow other users to potentially observe or manipulate the screen content, or cause the application to crash.

Recommendations Update TigerVNC to version 1.16.2 or later.

Exploit

Fix

DoS

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

ALSA-2026:10739

ALSA-2026:13414

ALSA-2026:19342

CVE-2026-34352

MGASA-2026-0088

OPENSUSE-SU-2026:10470-1

OPENSUSE-SU-2026:20465-1

RHSA-2026:10739

RHSA-2026:13414

RHSA-2026:19342

RHSA-2026:23254

RHSA-2026:23255

RHSA-2026:23496

RHSA-2026:24341

SUSE-SU-2026:1252-1

SUSE-SU-2026:1301-1

SUSE-SU-2026:1302-1

SUSE-SU-2026:1303-1

SUSE-SU-2026:1360-1

SUSE-SU-2026:21140-1

Affected Products

Rocky Linux

Tigervnc

References · 66

• 🔥 https://github.com/TigerVNC/tigervnc/issues/2079 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34352.json · Exploit
• https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-34352 · Security Note
• https://linux.oracle.com/errata/ELSA-2026-10739.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-19342.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-34352 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-34352 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1302-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-19342.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:19342 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1252-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:13414 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1301-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21140-1 · Vendor Advisory