{
  "cveId": "CVE-2026-32853",
  "url": "https://patchblox.com/security/cve/CVE-2026-32853",
  "summary": "CVE-2026-32853 is fixed in 4 products on 1 platform, first by DEBIAN-CVE-2026-32853, released March 24, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "libvncserver: LibVNCServer versions 0.9.15 and prior (fixed in\u00A0commit 009008e) contain a heap out-of-bounds read vulnerability in t...",
  "description": "LibVNCServer versions 0.9.15 and prior (fixed in\u00A0commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or application crash. Attackers can exploit improper bounds checking in the HandleUltraZipBPP() function by manipulating subrectangle header counts to read beyond the allocated heap buffer.",
  "published": "2026-03-24T11:16:00Z",
  "severity": "high",
  "cvss": 8.1,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
  "epss": 0.00445,
  "epssPercentile": 0.38914,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "LibVNCServer",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "0.9.14-150600.3.6.1",
      "fix": "SUSE-SU-2026:1173-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1173-1",
      "released": "2026-04-02T12:43:10Z"
    },
    {
      "platform": "linux",
      "product": "LibVNCServer",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "0.9.14-160000.4.1",
      "fix": "OPENSUSE-SU-2026:20552-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20552-1",
      "released": "2026-04-16T13:10:27Z"
    },
    {
      "platform": "linux",
      "product": "LibVNCServer",
      "release": "sles 15.7",
      "fixedVersion": "0.9.14-150600.3.6.1",
      "fix": "SUSE-SU-2026:1173-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1173-1",
      "released": "2026-04-02T12:43:10Z"
    },
    {
      "platform": "linux",
      "product": "LibVNCServer",
      "release": "sles 16.0",
      "fixedVersion": "0.9.14-160000.4.1",
      "fix": "SUSE-SU-2026:21206-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-21206-1",
      "released": "2026-04-16T12:54:03Z"
    },
    {
      "platform": "linux",
      "product": "libvncclient1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.9.13\u002Bdfsg-3ubuntu0.1",
      "fix": "libvncclient1 0.9.13\u002Bdfsg-3ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libvncclient1-0.9.13-dfsg-3ubuntu0.1",
      "released": "2026-06-24T14:07:32Z"
    },
    {
      "platform": "linux",
      "product": "libvncclient1",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "0.9.14\u002Bdfsg-1ubuntu0.1",
      "fix": "libvncclient1 0.9.14\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libvncclient1-0.9.14-dfsg-1ubuntu0.1",
      "released": "2026-06-24T14:07:41Z"
    },
    {
      "platform": "linux",
      "product": "libvncclient1",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "0.9.15\u002Bdfsg-1ubuntu0.1",
      "fix": "libvncclient1 0.9.15\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libvncclient1-0.9.15-dfsg-1ubuntu0.1",
      "released": "2026-06-24T14:07:44Z"
    },
    {
      "platform": "linux",
      "product": "libvncserver",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "0.9.14\u002Bdfsg-1\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2026-32853",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-32853",
      "released": "2026-03-24T18:16:09Z"
    },
    {
      "platform": "linux",
      "product": "libvncserver",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "0.9.15\u002Bdfsg-1\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-32853",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-32853",
      "released": "2026-03-24T18:16:09Z"
    },
    {
      "platform": "linux",
      "product": "libvncserver",
      "release": "Debian 14",
      "fixedVersion": "0.9.15\u002Bdfsg-3",
      "fix": "DEBIAN-CVE-2026-32853",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-32853",
      "released": "2026-03-24T18:16:09Z"
    },
    {
      "platform": "linux",
      "product": "libvncserver1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.9.13\u002Bdfsg-3ubuntu0.1",
      "fix": "libvncserver1 0.9.13\u002Bdfsg-3ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libvncserver1-0.9.13-dfsg-3ubuntu0.1",
      "released": "2026-06-24T14:07:32Z"
    },
    {
      "platform": "linux",
      "product": "libvncserver1",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "0.9.14\u002Bdfsg-1ubuntu0.1",
      "fix": "libvncserver1 0.9.14\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libvncserver1-0.9.14-dfsg-1ubuntu0.1",
      "released": "2026-06-24T14:07:41Z"
    },
    {
      "platform": "linux",
      "product": "libvncserver1",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "0.9.15\u002Bdfsg-1ubuntu0.1",
      "fix": "libvncserver1 0.9.15\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libvncserver1-0.9.15-dfsg-1ubuntu0.1",
      "released": "2026-06-24T14:07:44Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}