Ultravnc
This hub aggregates every CVE we track for Ultravnc, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Security Productsdesktop app
42
CVEs tracked
21
Critical
14
High
0
In CISA KEV
Severity distribution
CRITICAL21HIGH14MEDIUM6LOW1
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
2
2
0
0
0
10
0
0
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Ultravnc.
- CVE-2026-7840UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)9.8
- CVE-2026-7839UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access9.1
- CVE-2026-7838UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length8.8
- CVE-2026-7831UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing7.6
- CVE-2026-7830UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception7.4
- CVE-2026-7829UltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token7.2
- CVE-2026-7828UltraVNC repeater integer overflow in win_log malloc leading to heap overflow5.3
- CVE-2026-44040UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes4.8
- CVE-2026-44041UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated4.3
- CVE-2026-44042UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check3.7
- CVE-2026-4962UltraVNC Service version.dll uncontrolled search path7.0
- CVE-2026-3787UltraVNC Windows Service cryptbase.dll uncontrolled search path7.0
- CVE-2020-37133UltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service7.5
- CVE-2020-37132UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service6.2
- CVE-2022-24750Low privilege user is able to exploit the service and gain SYSTEM privileges in UltraVNC server8.8
Product normalization is registry-driven with AI assist and human review. How it works