VULNERABILITY INTELLIGENCE
CVE-2019-8275
CVSS score9.8 CRITICAL
EPSS probability3.97%
CISA KEVNot currently listed
Published2019-03-08
Last modified2026-06-17
Description
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.