Libvncserver
Vendor:
First CVE: Dec 19, 2018 · Active for 7 years
27
Total CVEs
More Total CVEs than 96% of tracked products
5.4
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
8.0
Avg CVSS
Higher Avg CVSS than 69% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Libvncserver over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 19, 2018
7 years ago
Most Recent CVE
Mar 24, 2026
122 days ago
CVE Severity & Scoring
Libvncserver27 CVEs
15%
56%
30%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network27 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low26 (96.3%)
High1 (3.7%)
Unknown0 (0.0%)
User Interaction
None25 (92.6%)
Unknown0 (0.0%)
Required2 (7.4%)
Privileges Required
Low4 (14.8%)
High0 (0.0%)
None23 (85.2%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (27 CVEs).
27 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-6307HIGH LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execu | Dec 19, 2018 | 8.1 | 39 | NO | NO |
CVE-2018-15127CRITICAL LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code e | Dec 19, 2018 | 9.8 | 38 | NO | NO |
CVE-2018-20019CRITICAL LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution | Dec 19, 2018 | 9.8 | 35 | NO | NO |
CVE-2018-15126CRITICAL LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execu | Dec 19, 2018 | 9.8 | 35 | NO | NO |
CVE-2018-20020CRITICAL LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client code that can result remote code executi | Dec 19, 2018 | 9.8 | 34 | NO | NO |
CVE-2018-20750CRITICAL LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete. | Jan 30, 2019 | 9.8 | 33 | NO | NO |
CVE-2019-20788CRITICAL libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overl | Apr 23, 2020 | 9.8 | 32 | NO | NO |
CVE-2018-20749CRITICAL LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete. | Jan 30, 2019 | 9.8 | 32 | NO | NO |
CVE-2018-20748CRITICAL LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete. | Jan 30, 2019 | 9.8 | 31 | NO | NO |
CVE-2026-32854HIGH LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c th | Mar 24, 2026 | 7.5 | 29 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (27 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (27 CVEs).
Media Mentions
Signals from CVEs in this product scope (27 CVEs).
Top CNAs Publishing CVEs For Libvncserver
Top CWEs
Versions
No cataloged versions.