yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2026-34352
Component Overview
Vulnerability Overview
Name
CVE-2026-34352
Source
NVD (
link
)
Debian (
link
)
Description
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
CWEs
CWE-732
Published Date
Mar 26, 2026
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393
Patch
https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI
Mailing List
https://sourceforge.net/projects/tigervnc/files/stable/1.16.2
Release Notes
https://www.openwall.com/lists/oss-security/2026/03/26/7
Mailing List
Analysis
#
Affected Component
Analysis
tigervnc
Exploitable
Vulnerability Ratings
#
8.5
CVSSv31
9.8
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
tigervnc
yocto
master
1.16.2
Not Affected
tigervnc
yocto
scarthgap
1.11.0
Exploitable