Uvnc
10 CVEs tracked since 2026. Since Jul 2026, none of them reached CISA KEV.
Uvnc CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-07 | 10 | 0 |
Products
The products that kept showing up in Uvnc's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Uvnc.
- CVE-2026-7840UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)9.8
- CVE-2026-7839UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access9.1
- CVE-2026-7838UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length8.8
- CVE-2026-7831UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing7.6
- CVE-2026-7830UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception7.4
- CVE-2026-7829UltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token7.2
- CVE-2026-7828UltraVNC repeater integer overflow in win_log malloc leading to heap overflow5.3
- CVE-2026-44040UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes4.8
- CVE-2026-44041UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated4.3
- CVE-2026-44042UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check3.7
- CVE-2026-4962UltraVNC Service version.dll uncontrolled search path7.0
- CVE-2019-25601UltraVNC Launcher 1.2.2.4 Denial of Service Buffer Overflow6.2
- CVE-2019-25600UltraVNC Viewer 1.2.2.4 Denial of Service via Buffer Overflow6.5
- CVE-2019-25564PCHelpWareV2 1.0.0.5 Denial of Service via Group Field5.5
- CVE-2019-25563PCHelpWareV2 1.0.0.5 Denial of Service via SC Creation6.2
The record
- Peak rank
- #138 in Jul 2026
- Busiest month shown
- Jul 2026, 10 CVEs
- Months with a KEV entry
- 0 since Jul 2026
- Monthly snapshots
- 1 since 2026