Approved changes feed: RSS · Atom

cpe:2.3:a:uvnc:ultravnc:1.6.4.0:*:*:*:*:*:*:*

part: a version: 1.6.4.0 update: *

VendorUvnc (0d6ffcc6-bcff-556c-8e6a-d4e91af8e263)
ProductUltravnc (d28382af-9c7d-5dcf-aed1-6a3c1cd096f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ultravnc/ultravnc purl2cpe 2026-06-01 10:11:32.738937
pkg:sourceforge/ultravnc purl2cpe 2026-06-01 10:11:32.738939

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3787 vulnerable 2026-06-08 08:01:19.392082 UltraVNC Windows Service cryptbase.dll uncontrolled search path
HIGH (7)
A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase.dll of the component Windows Service. This manipulation causes uncontrolled search path. The attack requires local access. A high degree of complexity is needed for the attack. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-08T23:02:06.940Z
Updated: 2026-03-10T20:26:30.164Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.