Vulnerabilidades en ultravnc
7 resultadosAnálisis Vexday
UltraVNC apresenta um perfil de risco baixo com apenas 1 vulnerabilidade catalogada na base, nenhuma sob exploração ativa conhecida. A fraqueza identificada (CWE-269 - Improper Assignment of Highly Privileged Status) sugere risco potencial de escalação de privilégios, mas sem eventos recentes de divulgação que indiquem pressão imediata.
CVE-2019-8262—UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execEPSS 4.8%CVE-2019-8258—UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be eEPSS 4.4%CVE-2019-8259—UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be EPSS 3.0%CVE-2018-15361—UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack EPSS 2.9%CVE-2019-8260—UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow. This attackEPSS 2.3%CVE-2019-8261—UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow. ThEPSS 2.2%CVE-2022-24750HIGHLow privilege user is able to exploit the service and gain SYSTEM privileges in UltraVNC serverEPSS 0.3%