{ "document" : { "aggregate_severity" : { "namespace" : "https://access.redhat.com/security/updates/classification/", "text" : "Important" }, "category" : "csaf_security_advisory", "csaf_version" : "2.0", "distribution" : { "text" : "Copyright © Red Hat, Inc. All rights reserved.", "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "en", "notes" : [ { "category" : "summary", "text" : "An update for tigervnc is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title" : "Topic" }, { "category" : "general", "text" : "Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.\n\nSecurity Fix(es):\n\n* xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)\n\n* xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)\n\n* xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)\n\n* TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title" : "Details" }, { "category" : "legal_disclaimer", "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title" : "Terms of Use" } ], "publisher" : { "category" : "vendor", "contact_details" : "https://access.redhat.com/security/team/contact/", "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name" : "Red Hat Product Security", "namespace" : "https://www.redhat.com" }, "references" : [ { "category" : "self", "summary" : "https://access.redhat.com/errata/RHSA-2026:10739", "url" : "https://access.redhat.com/errata/RHSA-2026:10739" }, { "category" : "external", "summary" : "https://access.redhat.com/security/updates/classification/#important", "url" : "https://access.redhat.com/security/updates/classification/#important" }, { "category" : "external", "summary" : "2451106", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2451106" }, { "category" : "external", "summary" : "2451109", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2451109" }, { "category" : "external", "summary" : "2451113", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2451113" }, { "category" : "external", "summary" : "2452022", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2452022" }, { "category" : "self", "summary" : "Canonical URL", "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10739.json" } ], "title" : "Red Hat Security Advisory: tigervnc security update", "tracking" : { "current_release_date" : "2026-05-13T15:48:18+00:00", "generator" : { "date" : "2026-05-13T15:48:18+00:00", "engine" : { "name" : "Red Hat SDEngine", "version" : "4.7.9" } }, "id" : "RHSA-2026:10739", "initial_release_date" : "2026-04-27T08:36:07+00:00", "revision_history" : [ { "date" : "2026-04-27T08:36:07+00:00", "number" : "1", "summary" : "Initial version" }, { "date" : "2026-04-27T08:36:07+00:00", "number" : "2", "summary" : "Last updated version" }, { "date" : "2026-05-13T15:48:18+00:00", "number" : "3", "summary" : "Last generated version" } ], "status" : "final", "version" : "3" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_name", "name" : "Red Hat Enterprise Linux AppStream (v. 9)", "product" : { "name" : "Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:enterprise_linux:9::appstream" } } } ], "category" : "product_family", "name" : "Red Hat Enterprise Linux" }, { "branches" : [ { "category" : "product_version", "name" : "tigervnc-0:1.15.0-6.el9_7.1.src", "product" : { "name" : "tigervnc-0:1.15.0-6.el9_7.1.src", "product_id" : "tigervnc-0:1.15.0-6.el9_7.1.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc@1.15.0-6.el9_7.1?arch=src" } } } ], "category" : "architecture", "name" : "src" }, { "branches" : [ { "category" : "product_version", "name" : "tigervnc-0:1.15.0-6.el9_7.1.aarch64", "product" : { "name" : "tigervnc-0:1.15.0-6.el9_7.1.aarch64", "product_id" : "tigervnc-0:1.15.0-6.el9_7.1.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc@1.15.0-6.el9_7.1?arch=aarch64" } } }, { "category" : "product_version", "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "product" : { "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "product_id" : "tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server@1.15.0-6.el9_7.1?arch=aarch64" } } }, { "category" : "product_version", "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "product" : { "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "product_id" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-minimal@1.15.0-6.el9_7.1?arch=aarch64" } } }, { "category" : "product_version", "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "product" : { "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "product_id" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-module@1.15.0-6.el9_7.1?arch=aarch64" } } }, { "category" : "product_version", "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "product" : { "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "product_id" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-debugsource@1.15.0-6.el9_7.1?arch=aarch64" } } }, { "category" : "product_version", "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product" : { "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product_id" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-debuginfo@1.15.0-6.el9_7.1?arch=aarch64" } } }, { "category" : "product_version", "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product" : { "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product_id" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-debuginfo@1.15.0-6.el9_7.1?arch=aarch64" } } }, { "category" : "product_version", "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product" : { "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product_id" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-minimal-debuginfo@1.15.0-6.el9_7.1?arch=aarch64" } } }, { "category" : "product_version", "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product" : { "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product_id" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-module-debuginfo@1.15.0-6.el9_7.1?arch=aarch64" } } } ], "category" : "architecture", "name" : "aarch64" }, { "branches" : [ { "category" : "product_version", "name" : "tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "product" : { "name" : "tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "product_id" : "tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc@1.15.0-6.el9_7.1?arch=ppc64le" } } }, { "category" : "product_version", "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "product" : { "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "product_id" : "tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server@1.15.0-6.el9_7.1?arch=ppc64le" } } }, { "category" : "product_version", "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "product" : { "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "product_id" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-minimal@1.15.0-6.el9_7.1?arch=ppc64le" } } }, { "category" : "product_version", "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "product" : { "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "product_id" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-module@1.15.0-6.el9_7.1?arch=ppc64le" } } }, { "category" : "product_version", "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "product" : { "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "product_id" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-debugsource@1.15.0-6.el9_7.1?arch=ppc64le" } } }, { "category" : "product_version", "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product" : { "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product_id" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-debuginfo@1.15.0-6.el9_7.1?arch=ppc64le" } } }, { "category" : "product_version", "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product" : { "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product_id" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-debuginfo@1.15.0-6.el9_7.1?arch=ppc64le" } } }, { "category" : "product_version", "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product" : { "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product_id" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-minimal-debuginfo@1.15.0-6.el9_7.1?arch=ppc64le" } } }, { "category" : "product_version", "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product" : { "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product_id" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-module-debuginfo@1.15.0-6.el9_7.1?arch=ppc64le" } } } ], "category" : "architecture", "name" : "ppc64le" }, { "branches" : [ { "category" : "product_version", "name" : "tigervnc-0:1.15.0-6.el9_7.1.x86_64", "product" : { "name" : "tigervnc-0:1.15.0-6.el9_7.1.x86_64", "product_id" : "tigervnc-0:1.15.0-6.el9_7.1.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc@1.15.0-6.el9_7.1?arch=x86_64" } } }, { "category" : "product_version", "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "product" : { "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "product_id" : "tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server@1.15.0-6.el9_7.1?arch=x86_64" } } }, { "category" : "product_version", "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "product" : { "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "product_id" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-minimal@1.15.0-6.el9_7.1?arch=x86_64" } } }, { "category" : "product_version", "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "product" : { "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "product_id" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-module@1.15.0-6.el9_7.1?arch=x86_64" } } }, { "category" : "product_version", "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "product" : { "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "product_id" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-debugsource@1.15.0-6.el9_7.1?arch=x86_64" } } }, { "category" : "product_version", "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product" : { "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product_id" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-debuginfo@1.15.0-6.el9_7.1?arch=x86_64" } } }, { "category" : "product_version", "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product" : { "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product_id" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-debuginfo@1.15.0-6.el9_7.1?arch=x86_64" } } }, { "category" : "product_version", "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product" : { "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product_id" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-minimal-debuginfo@1.15.0-6.el9_7.1?arch=x86_64" } } }, { "category" : "product_version", "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product" : { "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product_id" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-module-debuginfo@1.15.0-6.el9_7.1?arch=x86_64" } } } ], "category" : "architecture", "name" : "x86_64" }, { "branches" : [ { "category" : "product_version", "name" : "tigervnc-0:1.15.0-6.el9_7.1.s390x", "product" : { "name" : "tigervnc-0:1.15.0-6.el9_7.1.s390x", "product_id" : "tigervnc-0:1.15.0-6.el9_7.1.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc@1.15.0-6.el9_7.1?arch=s390x" } } }, { "category" : "product_version", "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "product" : { "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "product_id" : "tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server@1.15.0-6.el9_7.1?arch=s390x" } } }, { "category" : "product_version", "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "product" : { "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "product_id" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-minimal@1.15.0-6.el9_7.1?arch=s390x" } } }, { "category" : "product_version", "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "product" : { "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "product_id" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-module@1.15.0-6.el9_7.1?arch=s390x" } } }, { "category" : "product_version", "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "product" : { "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "product_id" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-debugsource@1.15.0-6.el9_7.1?arch=s390x" } } }, { "category" : "product_version", "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product" : { "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product_id" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-debuginfo@1.15.0-6.el9_7.1?arch=s390x" } } }, { "category" : "product_version", "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product" : { "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product_id" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-debuginfo@1.15.0-6.el9_7.1?arch=s390x" } } }, { "category" : "product_version", "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product" : { "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product_id" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-minimal-debuginfo@1.15.0-6.el9_7.1?arch=s390x" } } }, { "category" : "product_version", "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product" : { "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product_id" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-server-module-debuginfo@1.15.0-6.el9_7.1?arch=s390x" } } } ], "category" : "architecture", "name" : "s390x" }, { "branches" : [ { "category" : "product_version", "name" : "tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "product" : { "name" : "tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "product_id" : "tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-icons@1.15.0-6.el9_7.1?arch=noarch" } } }, { "category" : "product_version", "name" : "tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "product" : { "name" : "tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "product_id" : "tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-license@1.15.0-6.el9_7.1?arch=noarch" } } }, { "category" : "product_version", "name" : "tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "product" : { "name" : "tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "product_id" : "tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/tigervnc-selinux@1.15.0-6.el9_7.1?arch=noarch" } } } ], "category" : "architecture", "name" : "noarch" } ], "category" : "vendor", "name" : "Red Hat" } ], "relationships" : [ { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64" }, "product_reference" : "tigervnc-0:1.15.0-6.el9_7.1.aarch64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le" }, "product_reference" : "tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x" }, "product_reference" : "tigervnc-0:1.15.0-6.el9_7.1.s390x", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-0:1.15.0-6.el9_7.1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src" }, "product_reference" : "tigervnc-0:1.15.0-6.el9_7.1.src", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64" }, "product_reference" : "tigervnc-0:1.15.0-6.el9_7.1.x86_64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64" }, "product_reference" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le" }, "product_reference" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x" }, "product_reference" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64" }, "product_reference" : "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64" }, "product_reference" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le" }, "product_reference" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x" }, "product_reference" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64" }, "product_reference" : "tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-icons-0:1.15.0-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch" }, "product_reference" : "tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-license-0:1.15.0-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch" }, "product_reference" : "tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch" }, "product_reference" : "tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64" }, "product_reference" : "tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le" }, "product_reference" : "tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x" }, "product_reference" : "tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64" }, "product_reference" : "tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64" }, "product_reference" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le" }, "product_reference" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x" }, "product_reference" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64" }, "product_reference" : "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64" }, "product_reference" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le" }, "product_reference" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x" }, "product_reference" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64" }, "product_reference" : "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64" }, "product_reference" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le" }, "product_reference" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x" }, "product_reference" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64" }, "product_reference" : "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64" }, "product_reference" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le" }, "product_reference" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x" }, "product_reference" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64" }, "product_reference" : "tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64" }, "product_reference" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le" }, "product_reference" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x" }, "product_reference" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" }, { "category" : "default_component_of", "full_product_name" : { "name" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" }, "product_reference" : "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "relates_to_product_reference" : "AppStream-9.7.0.Z.MAIN" } ] }, "vulnerabilities" : [ { "acknowledgments" : [ { "names" : [ "Jan-Niklas Sohn" ], "organization" : "TrendAI Zero Day Initiative" } ], "cve" : "CVE-2026-33999", "cwe" : { "id" : "CWE-191", "name" : "Integer Underflow (Wrap or Wraparound)" }, "discovery_date" : "2026-03-25T06:29:19.544586+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2451106" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "An Important integer underflow vulnerability exists in the X.Org X server's XKB compatibility map handling. This flaw allows an attacker with local or remote X11 server access to trigger a buffer read overrun, leading to memory-safety violations and potential denial of service. Red Hat Enterprise Linux systems utilizing the X.Org X server in graphical environments are affected.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-33999" }, { "category" : "external", "summary" : "RHBZ#2451106", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2451106" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-33999", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-33999" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-33999", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-33999" } ], "release_date" : "2026-04-23T14:11:12.550000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-04-27T08:36:07+00:00", "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:10739" }, { "category" : "workaround", "details" : "To mitigate this issue, restrict access to the X11 server. For remote access, disable X11 forwarding in SSH configurations if not required. Edit `/etc/ssh/sshd_config` and set `X11Forwarding no`. After modifying the configuration, restart the `sshd` service using `systemctl restart sshd`. Disabling X11 forwarding may impact remote graphical applications.", "product_ids" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "LOCAL", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "LOW", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version" : "3.1" }, "products" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling" }, { "acknowledgments" : [ { "names" : [ "Jan-Niklas Sohn" ], "organization" : "TrendAI Zero Day Initiative" } ], "cve" : "CVE-2026-34001", "cwe" : { "id" : "CWE-825", "name" : "Expired Pointer Dereference" }, "discovery_date" : "2026-03-25T07:00:05.329048+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2451109" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "Important: This use-after-free vulnerability in the X.Org X server's XSYNC fence triggering logic can lead to a server crash and potential memory corruption. Exploitation requires an attacker to have access to the X11 server, typically limited to local users or trusted remote connections. Systems not running the X.Org X server are not affected.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-34001" }, { "category" : "external", "summary" : "RHBZ#2451109", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2451109" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-34001", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-34001" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-34001", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-34001" } ], "release_date" : "2026-04-23T14:14:42.224000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-04-27T08:36:07+00:00", "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:10739" }, { "category" : "workaround", "details" : "To mitigate this issue, restrict access to the X11 server to trusted users and networks. If the X.Org X server is not required, consider disabling or uninstalling it. For environments where the X server is essential, running X applications within a sandboxed environment can help reduce the attack surface.", "product_ids" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "LOCAL", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "LOW", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version" : "3.1" }, "products" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption" }, { "acknowledgments" : [ { "names" : [ "Jan-Niklas Sohn" ], "organization" : "TrendAI Zero Day Initiative" } ], "cve" : "CVE-2026-34003", "cwe" : { "id" : "CWE-125", "name" : "Out-of-bounds Read" }, "discovery_date" : "2026-03-25T07:19:13.949261+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2451113" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "An Important out-of-bounds memory access vulnerability exists in the X.Org X server's XKB key types request validation. This flaw could lead to information exposure or a server crash and requires a specially crafted request to trigger. Systems running a graphical environment are potentially affected, with higher impact outcomes possible in certain configurations.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-34003" }, { "category" : "external", "summary" : "RHBZ#2451113", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2451113" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-34003", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-34003" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-34003", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-34003" } ], "release_date" : "2026-04-23T14:18:00.653000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-04-27T08:36:07+00:00", "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:10739" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "LOCAL", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "LOW", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version" : "3.1" }, "products" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access" }, { "cve" : "CVE-2026-34352", "cwe" : { "id" : "CWE-279", "name" : "Incorrect Execution-Assigned Permissions" }, "discovery_date" : "2026-03-26T23:01:46.925344+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2452022" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in TigerVNC's x0vncserver component. Due to incorrect permissions in the Image.cxx file, other users on the system can observe or manipulate the screen contents of a running session. This vulnerability could also lead to an application crash, resulting in a Denial of Service (DoS).", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-34352" }, { "category" : "external", "summary" : "RHBZ#2452022", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2452022" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-34352", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-34352" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-34352", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-34352" }, { "category" : "external", "summary" : "https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393", "url" : "https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393" }, { "category" : "external", "summary" : "https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI", "url" : "https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI" }, { "category" : "external", "summary" : "https://sourceforge.net/projects/tigervnc/files/stable/1.16.2", "url" : "https://sourceforge.net/projects/tigervnc/files/stable/1.16.2" }, { "category" : "external", "summary" : "https://www.openwall.com/lists/oss-security/2026/03/26/7", "url" : "https://www.openwall.com/lists/oss-security/2026/03/26/7" } ], "release_date" : "2026-03-26T22:30:46.928000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-04-27T08:36:07+00:00", "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:10739" }, { "category" : "workaround", "details" : "The x0vncserver component should be disabled if not actively required. If x0vncserver is necessary, ensure that only trusted users have access to the system where it is running. To disable the x0vncserver service, if it is running as a systemd service, you can use: `sudo systemctl stop x0vncserver.service` `sudo systemctl disable x0vncserver.service` If x0vncserver is launched manually, avoid running it in multi-user environments. A service restart or system reboot may be required for changes to take full effect.", "product_ids" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "LOCAL", "availabilityImpact" : "LOW", "baseScore" : 6.3, "baseSeverity" : "MEDIUM", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "privilegesRequired" : "LOW", "scope" : "CHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "version" : "3.1" }, "products" : [ "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src", "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x", "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Moderate" } ], "title" : "TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions" } ] }