CVE-2019-8265CWE-788

CVE-2019-8265: vulnerability in Kaspersky Lab UltraVNC

Published · Updated

Follow this CVE+ Monitor UltraVNC

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.1%
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1208.
Affected products
Kaspersky Lab · UltraVNC
Related CVEs — Kaspersky Lab UltraVNC

In the same product, most dangerous first.

CVE-2019-8271—CVE-2019-8271EPSS 8.3%CVE-2019-8274—CVE-2019-8274EPSS 8.3%CVE-2019-8273—CVE-2019-8273EPSS 8.3%CVE-2019-8276—CVE-2019-8276EPSS 5.7%CVE-2019-8269—CVE-2019-8269EPSS 5.7%CVE-2019-8280—CVE-2019-8280EPSS 4.2%