Uvnc vulnerabilities

Newest CVEs

• CVE-2026-7840

  UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)

  uvnc · UltraVNC

  Critical9.3
• CVE-2026-7839

  UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access

  uvnc · UltraVNC

  Critical9.1
• CVE-2026-7838

  UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length

  uvnc · UltraVNC

  High8.7
• CVE-2026-7831

  UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing

  uvnc · UltraVNC

  High7.5
• CVE-2026-7830

  UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception

  uvnc · UltraVNC

  High7.4
• CVE-2026-7829

  UltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token

  uvnc · UltraVNC

  High7.2
• CVE-2026-7828

  UltraVNC repeater integer overflow in win_log malloc leading to heap overflow

  uvnc · UltraVNC

  Medium5.3
• CVE-2026-44040

  UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes

  uvnc · UltraVNC

  Medium4.8
• CVE-2026-44041

  UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated

  uvnc · UltraVNC

  Medium4.3
• CVE-2026-44042

  UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check

  uvnc · UltraVNC

  Low3.7