TightVNC and UltraVNC viewers have Tight JPEG heap overflow (CVE-2026-128321)
A malicious VNC server can crash TightVNC 1.3.10 and affected UltraVNC viewers; only denial of service was shown.
62
Vendor
TightVNC
- Mentions · 7d1
- Mentions · 30d2
- All mentions2
- First seenNov 2, 2026
- Last mentioned1h ago
Timeline
2 articles · newest firstTightVNC Viewer pre-auth RCE via memory corruption
Attackers execute code on Windows PCs before password prompt using crafted large screen sizes in RFB protocol; PoC released but no active exploitation confirmed.
70
Related CVEs
by mentionsAppears with
- TightVNC Windows Viewerproduct · 1
- TightVNC Viewerproduct · 1
- UltraVNC Windows Viewerproduct · 1
- CERT/CCorganization · 1
- UltraVNCvendor · 1
- SSD Labs Koreaorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.