Description
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
References (5)
Core 5
Scores
CVSS v3
8.5
EPSS
0.0025
EPSS Percentile
15.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-732
Status
published
Products (2)
TigerVNC/TigerVNC
< 1.16.2
tigervnc/tigervnc
< 1.16.2
Published
Mar 26, 2026
Tracked Since
Mar 27, 2026