VULNERABILITY INTELLIGENCE

CVE-2019-8275

CVSS score9.8 CRITICAL
EPSS probability3.97%
CISA KEVNot currently listed
Published2019-03-08
Last modified2026-06-17

Description

UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.