CVE-2026-34352: Critical severity TigerVNC x0vncserver vulnerability
Published Mar 26, 2026
·Updated
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
Affected Software
2 affected components
TigerVNC x0vncserver<1.16.2
TigerVNC TigerVNC<1.16.2
Remediation
Patch Available
Event History
Mar 26, 2026
CVE Published
via MITRE·10:30 PM
Data Sourced
via MITRE·10:30 PM
DescriptionSeverityWeakness
Data Sourced
via Red Hat·11:02 PM
DescriptionSeverityAffected Software
Data Sourced
via NVD·11:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-34352?
CVE-2026-34352 has a high severity level due to its potential for unauthorized screen observation and manipulation.
2
How do I fix CVE-2026-34352?
To fix CVE-2026-34352, upgrade TigerVNC to version 1.16.2 or later.
3
What causes CVE-2026-34352?
CVE-2026-34352 is caused by incorrect permissions in the Image.cxx file of the x0vncserver component.
4
Which versions of TigerVNC are affected by CVE-2026-34352?
Versions of TigerVNC prior to 1.16.2 are affected by CVE-2026-34352.
5
What are the potential impacts of CVE-2026-34352?
The potential impacts of CVE-2026-34352 include unauthorized access to screen contents and application crashes.