CVE-2026-34352
High · 8.5CVSS
8.5
EPSS
0.4%
Published
Mar 26, 2026
CISA due date
—
The record
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Server 15 SP6-LTSS | tigervnc | 0 | 1.13.1-150600.4.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | tigervnc | 0 | 1.13.1-150600.4.3.1 |
| openSUSE:Leap 15.6 | tigervnc | 0 | 1.13.1-150600.4.3.1 |
| openSUSE:Leap 16.0 | tigervnc | 0 | 1.15.0-160000.3.1 |
| openSUSE:Tumbleweed | tigervnc | 0 | 1.16.1-2.1 |
Related vulnerabilities
- CVE-2015-0255 X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows… Also affects tigervnc
- CVE-2026-102282 adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. CWE-732
- CVE-2026-92941 vm2 versions from 3.11.3 before 3.11.7 expose the host tls module to NodeVM sandbox code… CWE-732
- CVE-2026-87988 An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass… CWE-732
- CVE-2026-19583 Velociraptor allows some sensitive artifacts to be gated by additional permissions. CWE-732
- CVE-2026-79617 Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM… CWE-732
- CVE-2026-82312 OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local… CWE-732
- CVE-2026-80112 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-732