Ultravnc
42 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Ultravnc, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Ultravnc CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 2 |
| 2026-03 | 2 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 10 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 42 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical21
- High14
- Medium6
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Ultravnc.
- CVE-2026-7840UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)9.8
- CVE-2026-7839UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access9.1
- CVE-2026-7838UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length8.8
- CVE-2026-7831UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing7.6
- CVE-2026-7830UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception7.4
- CVE-2026-7829UltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token7.2
- CVE-2026-7828UltraVNC repeater integer overflow in win_log malloc leading to heap overflow5.3
- CVE-2026-44040UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes4.8
- CVE-2026-44041UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated4.3
- CVE-2026-44042UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check3.7
- CVE-2026-4962UltraVNC Service version.dll uncontrolled search path7.0
- CVE-2026-3787UltraVNC Windows Service cryptbase.dll uncontrolled search path7.0
- CVE-2020-37133UltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service7.5
- CVE-2020-37132UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service6.2
- CVE-2022-24750Low privilege user is able to exploit the service and gain SYSTEM privileges in UltraVNC server8.8
Product grouping is registry-driven, with AI assist and human review. How it works