Approved changes feed: RSS · Atom
cpe:2.3:a:tigervnc:tigervnc:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Tigervnc (cfeed494-6cb8-5832-a4ff-8de23254b5cf) |
|---|---|
| Product | Tigervnc (aeb8145d-c1a9-58c4-b121-243457c3bbf6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/tigervnc |
purl2cpe | 2026-06-01 10:12:57.898352 |
pkg:deb/ubuntu/tigervnc |
purl2cpe | 2026-06-01 10:12:57.898355 |
pkg:github/tigervnc/tigervnc |
purl2cpe | 2026-06-01 10:12:57.898358 |
pkg:rpm/centos/tigervnc |
purl2cpe | 2026-06-01 10:12:57.898361 |
pkg:rpm/fedora/tigervnc |
purl2cpe | 2026-06-01 10:12:57.898364 |
pkg:rpm/opensuse/tigervnc |
purl2cpe | 2026-06-01 10:12:57.898366 |
pkg:sourceforge/tigervnc |
purl2cpe | 2026-06-01 10:12:57.898369 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-26601 |
vulnerable | 2026-06-08 07:12:52.633236 |
Xorg: xwayland: use-after-free in syncinittrigger()
HIGH (7.8)
A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger() is called. If one of the changes triggers an error, the function will return early, not adding the new sync object, possibly causing a use-after-free when the alarm eventually triggers.
Published: 2025-02-25T15:55:36.775Z
Updated: 2026-11-04T21:33:12.394Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26600 |
vulnerable | 2026-06-08 07:12:52.632205 |
Xorg: xwayland: use-after-free in playreleasedevents()
HIGH (7.8)
A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free.
Published: 2025-02-25T15:55:20.421Z
Updated: 2026-11-04T21:33:09.095Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26599 |
vulnerable | 2026-06-08 07:12:52.631076 |
Xorg: xwayland: use of uninitialized pointer in compredirectwindow()
HIGH (7.8)
An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.
Published: 2025-02-25T15:55:02.964Z
Updated: 2026-11-04T21:33:02.642Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26598 |
vulnerable | 2026-06-08 07:12:52.629959 |
Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()
HIGH (7.8)
An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.
Published: 2025-02-25T15:54:57.355Z
Updated: 2026-11-04T21:33:03.439Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26597 |
vulnerable | 2026-06-08 07:12:52.628716 |
Xorg: xwayland: buffer overflow in xkbchangetypesofkey()
HIGH (7.8)
A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size.
Published: 2025-02-25T15:54:48.196Z
Updated: 2026-11-04T21:32:57.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26596 |
vulnerable | 2026-06-08 07:12:52.627667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26595 |
vulnerable | 2026-06-08 07:12:52.626295 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26594 |
vulnerable | 2026-06-08 07:12:52.620995 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6478 |
vulnerable | 2026-06-08 06:19:47.452423 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6377 |
vulnerable | 2026-06-08 06:19:47.078100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8241 |
vulnerable | 2026-06-08 05:06:08.299247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.