LibVNCServer

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. LibVNCServer httpd proxy NULL Pointer DereferenceCVE-2026-32854LibVNC · CVSS 6.3 · 5.5% likely

   CWE-476

2. libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.CVE-2019-20839Libvnc Project · 3.6% likely

   CWE-120

3. An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.CVE-2020-14397Libvnc Project · 3.4% likely

   CWE-476

4. LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.CVE-2018-20750Libvnc Project · 3.3% likely

   CWE-787

5. LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.CVE-2018-20748Libvnc Project · 3.3% likely

   CWE-787

6. LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.CVE-2018-20749Libvnc Project · 3.2% likely

   CWE-787

7. An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c.CVE-2020-14398Libvnc Project · 2.7% likely

   CWE-835

8. An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode.CVE-2019-20840Libvnc Project · 2.7% likely

   CWE-787

9. An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.CVE-2020-14396Libvnc Project · 2.6% likely

   CWE-476

10. libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may over…CVE-2019-20788Libvnc Project · 2.5% likely

    CWE-190

11. An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.CVE-2018-21247Libvnc Project · 2.4% likely

    CWE-909

12. An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.CVE-2020-14405Libvnc Project · 1.9% likely

    CWE-770

13. An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings.CVE-2020-14402Libvnc Project · 1.9% likely

    CWE-787

14. An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings.CVE-2020-14403Libvnc Project · 1.6% likely

    CWE-787

15. An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings.CVE-2020-14404Libvnc Project · 1.6% likely

    CWE-787

16. LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c. An attacker sends cursor shap…CVE-2019-15690LibVNC · CVSS 8.8 · 0.8% likely

    CWE-122

17. LibVNCServer UltraZip Encoding Heap Out-of-bounds ReadCVE-2026-32853LibVNC · CVSS 6.9 · 0.5% likely

    CWE-125

18. libvncclient Tight decoder has an attacker-controlled heap out-of-bounds writeCVE-2026-50538LibVNC · CVSS 8.8 · 0.4% likely

    CWE-122

19. LibVNCClient Tight Gradient decoding allows malicious server-triggered heap/stack OOB writesCVE-2026-44988LibVNC · CVSS 8.8 · 0.2% likely

    CWE-787

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.