Product by Uvnc
UltraVNC
37 known vulnerabilities in UltraVNC (Uvnc), 0 of them actively exploited (CISA KEV).
Key figures
37
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
17
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-7840 | UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE) | 9.8 | |
| Critical | CVE-2019-8274 | Kaspersky Lab UltraVNC: Heap-based Buffer Overflow | 9.8 | |
| Critical | CVE-2019-8273 | Kaspersky Lab UltraVNC: Heap-based Buffer Overflow | 9.8 | |
| Critical | CVE-2019-8271 | Kaspersky Lab UltraVNC: Heap-based Buffer Overflow | 9.8 | |
| Critical | CVE-2019-8262 | UltraVNC: Heap-based Buffer Overflow | 9.8 | |
| Critical | CVE-2019-8258 | UltraVNC: Heap-based Buffer Overflow | 9.8 | |
| Critical | CVE-2019-8280 | Kaspersky Lab UltraVNC: Access of Memory Location After End of Buffer | 9.8 | |
| Critical | CVE-2019-8275 | Kaspersky Lab UltraVNC: Improper Null Termination | 9.8 | |
| Critical | CVE-2019-8268 | Kaspersky Lab UltraVNC: Off-by-one Error | 9.8 | |
| Critical | CVE-2019-8272 | Kaspersky Lab UltraVNC: Off-by-one Error | 9.8 | |
| High | CVE-2026-7838 | UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length | 8.8 | |
| Critical | CVE-2019-8265 | Kaspersky Lab UltraVNC: Access of Memory Location After End of Buffer | 9.8 | |
| Critical | CVE-2019-8264 | Kaspersky Lab UltraVNC: Access of Memory Location After End of Buffer | 9.8 | |
| Critical | CVE-2018-15361 | UltraVNC: Buffer Underflow | 9.8 | |
| Critical | CVE-2019-8266 | Kaspersky Lab UltraVNC: Access of Memory Location After End of Buffer | 9.8 | |
| High | CVE-2019-8269 | Kaspersky Lab UltraVNC: Stack-based Buffer Overflow | 7.5 | |
| High | CVE-2019-8276 | Kaspersky Lab UltraVNC: Stack-based Buffer Overflow | 7.5 | |
| Critical | CVE-2019-8260 | UltraVNC: Out-of-bounds Read | 9.8 | |
| Critical | CVE-2019-8261 | UltraVNC: Out-of-bounds Read | 9.8 | |
| High | CVE-2019-8259 | UltraVNC: Improper Initialization | 7.5 | |
| High | CVE-2019-8277 | Kaspersky Lab UltraVNC: Improper Initialization | 7.5 | |
| Medium | CVE-2019-8263 | Kaspersky Lab UltraVNC: Stack-based Buffer Overflow | 6.5 | |
| High | CVE-2019-8267 | Kaspersky Lab UltraVNC: Out-of-bounds Read | 7.5 | |
| High | CVE-2019-8270 | Kaspersky Lab UltraVNC: Out-of-bounds Read | 7.5 | |
| Medium | CVE-2026-7828 | UltraVNC repeater integer overflow in win_log malloc leading to heap overflow | 5.3 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,