Vulnerabilities
Summary — last 7 days
New vulnerabilities4,784▲ 1,735 vs. last week
Critical / high2,627▲ 1,089 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)209▲ 39 vs. last week
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | High (7.8) | 0.14% | — | Glavsoft Tightvnc ServerAI | 10/8/2026 | 10/8/2026 | An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init() (and ThemeLib) load screenhooks32.dll / screenhooks64.dll with LoadLibrary() using a bare file name and no… | |
| Awaiting Analysis | Medium (6.1) | 0.10% | — | Glavsoft Tightvnc ServerAI | 10/8/2026 | 10/8/2026 | An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI capture path. The… | |
| Awaiting Analysis | Medium (5.9) | 0.31% | — | Glavsoft Tightvnc ServerAI | 10/8/2026 | 10/8/2026 | A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails in applyNewScreenProperties() (for example after a… | |
| Awaiting Analysis | High (7.8) | 0.10% | — | Glavsoft Tightvnc ServerAI | 10/8/2026 | 10/8/2026 | Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global\ namespace that carries… | |
| Deferred | Critical (9.1) | 2.1% | 💥 Exploit | Tightvnc Server FOR WindowsAI | 7/28/2024 | 6/17/2026 | TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection. |