CVE-2026-107613

MediumCVSS 5.9

Published: 08/10/2026(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

A NULL pointer dereference vulnerability in the Win8ScreenDriver component of TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails, m_drvImpl is left NULL and is subsequently dereferenced without a check.

Risk Assessment

An attacker can cause a denial of service by crashing the VNC server.

Recommendation

Update TightVNC Server to version 2.8.88 or later.

Other vulnerabilities in TightVNC Server

CVE-2026-107614Medium
An integer underflow in WinCursorShapeUtils::trimTransparent() in TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server and potentially read out-of-bounds memory by processing a cursor with zero width or height on the DXGI capture path.

Original NVD description (English source)

A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails in applyNewScreenProperties() (for example after a GPU reset, display hot-plug or session change), m_drvImpl is left NULL and is subsequently dereferenced without a check by executeDetection(), getScreenBuffer(), grabFb(), getScreenPropertiesChanged() and getCursorPosition().

Vulnerability data from NVD (NIST) · CISA KEV · EPSS