CVE-2019-15679

—

CVSS 3.1

9.8 critical

EPSS

12%p96

Published

Oct 29, 2019 (Oct 29, 2019)

Modified

Jun 17, 2026

Description

TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.

Vendors: tightvnc
Products: tightvnc
Weakness: CWE-122, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (11.8%)

In the news0 stories

No ingested article mentions this CVE yet.