Red Hat Security Advisory: tigervnc security update

Fixed packages 5

Vulnerabilities 6

• High 8.5
  CVE-2026-34352

  In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or…

  TigerVNC TigerVNC tigervnc tigervnc Debian Ubuntu
  Mar 26, 2026
• High 7.8
  CVE-2026-33999

  Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling

  A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violat…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  Apr 23, 2026
• High 7.8
  CVE-2026-34001

  Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption

  A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, l…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  Apr 23, 2026
• High 7.8
  CVE-2026-34003

  Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access

  A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive infor…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  Apr 23, 2026
• Medium 6.1
  CVE-2026-34000

  Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.

  A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An att…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  May 5, 2026
• Medium 6.1
  CVE-2026-34002

  Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling

  A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  May 5, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2451106
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2451107
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2451109
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2451112
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2451113
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2452022
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_23496.json
• report
  https://access.redhat.com/security/cve/CVE-2026-33999
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-33999
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-33999
• report
  https://access.redhat.com/security/cve/CVE-2026-34000
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-34000
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-34000
• report
  https://access.redhat.com/security/cve/CVE-2026-34001
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-34001
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-34001
• report
  https://access.redhat.com/security/cve/CVE-2026-34002
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-34002
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-34002
• report
  https://access.redhat.com/security/cve/CVE-2026-34003
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-34003
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-34003
• report
  https://access.redhat.com/security/cve/CVE-2026-34352
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-34352
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-34352
• article
  https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393
• article
  https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI
• article
  https://sourceforge.net/projects/tigervnc/files/stable/1.16.2
• article
  https://www.openwall.com/lists/oss-security/2026/03/26/7