# CVE-2026-34352: tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... CVE-2026-34352 is fixed in 12 products on 1 platform, first by DEBIAN-CVE-2026-34352, released March 26, 2026. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2026-34352 - Priority: High - CVSS: 9.8 (Important) - EPSS: 0.0025 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Mar 26, 2026 ## Description Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | tigervnc Debian 13.5 (trixie) | 1.15.0+dfsg-2.1~deb13u1 | [DEBIAN-CVE-2026-34352](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34352.md) | Mar 26, 2026 | | Linux | tigervnc Debian 14 | 1.15.0+dfsg-2.1 | [DEBIAN-CVE-2026-34352](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34352.md) | Mar 26, 2026 | | Linux | tigervnc RHEL 8 | 0:1.15.0-9.el8_10 | [RHSA-2026:13414](https://patchblox.com/security/data/fix/linux/rhsa-2026-13414.md) | May 15, 2026 | | Linux | tigervnc RHEL 9 | 0:1.15.0-7.el9_8.1 | [RHSA-2026:19342](https://patchblox.com/security/data/fix/linux/rhsa-2026-19342.md) | Apr 30, 2026 | | Linux | tigervnc almalinux 8 | 1.15.0-9.el8_10 | [ALSA-2026:13414](https://patchblox.com/security/data/fix/linux/alsa-2026-13414.md) | May 4, 2026 | | Linux | tigervnc almalinux 9 | 1.15.0-7.el9_8.1 | [ALSA-2026:19342](https://patchblox.com/security/data/fix/linux/alsa-2026-19342.md) | May 19, 2026 | | Linux | tigervnc amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | | Linux | tigervnc ol 8 | 0:1.15.0-9.el8_10 | [ELSA-2026-13414](https://patchblox.com/security/data/fix/linux/elsa-2026-13414.md) | May 5, 2026 | | Linux | tigervnc ol 9 | 0:1.15.0-6.el9_7.1 | [ELSA-2026-10739](https://patchblox.com/security/data/fix/linux/elsa-2026-10739.md) | Apr 27, 2026 | | Linux | tigervnc opensuse-leap 15.6 | 1.13.1-150600.4.3.1 | [SUSE-SU-2026:1252-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1252-1.md) | Apr 10, 2026 | | Linux | tigervnc opensuse-leap 16.0 | 1.15.0-160000.3.1 | [OPENSUSE-SU-2026:20465-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20465-1.md) | Apr 7, 2026 | | Linux | tigervnc rocky 8 | 0:1.15.0-9.el8_10 | [RLSA-2026:13414](https://patchblox.com/security/data/fix/linux/rlsa-2026-13414.md) | May 7, 2026 | | Linux | tigervnc rocky 9 | 0:1.15.0-7.el9_8.1 | [RLSA-2026:19342](https://patchblox.com/security/data/fix/linux/rlsa-2026-19342.md) | May 28, 2026 | | Linux | tigervnc sles 15.6 | 1.13.1-150600.4.3.1 | [SUSE-SU-2026:1252-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1252-1.md) | Apr 10, 2026 | | Linux | tigervnc sles 15.7 | 1.14.1-150700.4.3.1 | [SUSE-SU-2026:1360-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1360-1.md) | Apr 15, 2026 | | Linux | tigervnc sles 16.0 | 1.15.0-160000.3.1 | [SUSE-SU-2026:21140-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-21140-1.md) | Apr 7, 2026 | | Linux | tigervnc-debuginfo amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | | Linux | tigervnc-debugsource amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | | Linux | tigervnc-icons RHEL 8 | 0:1.15.0-9.el8_10 | [RHSA-2026:13414](https://patchblox.com/security/data/fix/linux/rhsa-2026-13414.md) | May 15, 2026 | | Linux | tigervnc-icons RHEL 9 | 0:1.15.0-7.el9_8.1 | [RHSA-2026:19342](https://patchblox.com/security/data/fix/linux/rhsa-2026-19342.md) | Apr 30, 2026 | | Linux | tigervnc-icons almalinux 8 | 1.15.0-9.el8_10 | [ALSA-2026:13414](https://patchblox.com/security/data/fix/linux/alsa-2026-13414.md) | May 4, 2026 | | Linux | tigervnc-icons almalinux 9 | 1.15.0-7.el9_8.1 | [ALSA-2026:19342](https://patchblox.com/security/data/fix/linux/alsa-2026-19342.md) | May 19, 2026 | | Linux | tigervnc-icons amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | | Linux | tigervnc-icons ol 8 | 0:1.15.0-9.el8_10 | [ELSA-2026-13414](https://patchblox.com/security/data/fix/linux/elsa-2026-13414.md) | May 5, 2026 | | Linux | tigervnc-icons ol 9 | 0:1.15.0-6.el9_7.1 | [ELSA-2026-10739](https://patchblox.com/security/data/fix/linux/elsa-2026-10739.md) | Apr 27, 2026 | | Linux | tigervnc-license RHEL 8 | 0:1.15.0-9.el8_10 | [RHSA-2026:13414](https://patchblox.com/security/data/fix/linux/rhsa-2026-13414.md) | May 15, 2026 | | Linux | tigervnc-license RHEL 9 | 0:1.15.0-7.el9_8.1 | [RHSA-2026:19342](https://patchblox.com/security/data/fix/linux/rhsa-2026-19342.md) | Apr 30, 2026 | | Linux | tigervnc-license almalinux 8 | 1.15.0-9.el8_10 | [ALSA-2026:13414](https://patchblox.com/security/data/fix/linux/alsa-2026-13414.md) | May 4, 2026 | | Linux | tigervnc-license almalinux 9 | 1.15.0-7.el9_8.1 | [ALSA-2026:19342](https://patchblox.com/security/data/fix/linux/alsa-2026-19342.md) | May 19, 2026 | | Linux | tigervnc-license amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | | Linux | tigervnc-license ol 8 | 0:1.15.0-9.el8_10 | [ELSA-2026-13414](https://patchblox.com/security/data/fix/linux/elsa-2026-13414.md) | May 5, 2026 | | Linux | tigervnc-license ol 9 | 0:1.15.0-6.el9_7.1 | [ELSA-2026-10739](https://patchblox.com/security/data/fix/linux/elsa-2026-10739.md) | Apr 27, 2026 | | Linux | tigervnc-selinux RHEL 8 | 0:1.15.0-9.el8_10 | [RHSA-2026:13414](https://patchblox.com/security/data/fix/linux/rhsa-2026-13414.md) | May 15, 2026 | | Linux | tigervnc-selinux RHEL 9 | 0:1.15.0-7.el9_8.1 | [RHSA-2026:19342](https://patchblox.com/security/data/fix/linux/rhsa-2026-19342.md) | Apr 30, 2026 | | Linux | tigervnc-selinux almalinux 8 | 1.15.0-9.el8_10 | [ALSA-2026:13414](https://patchblox.com/security/data/fix/linux/alsa-2026-13414.md) | May 4, 2026 | | Linux | tigervnc-selinux almalinux 9 | 1.15.0-7.el9_8.1 | [ALSA-2026:19342](https://patchblox.com/security/data/fix/linux/alsa-2026-19342.md) | May 19, 2026 | | Linux | tigervnc-selinux amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | | Linux | tigervnc-selinux ol 8 | 0:1.15.0-9.el8_10 | [ELSA-2026-13414](https://patchblox.com/security/data/fix/linux/elsa-2026-13414.md) | May 5, 2026 | | Linux | tigervnc-selinux ol 9 | 0:1.15.0-6.el9_7.1 | [ELSA-2026-10739](https://patchblox.com/security/data/fix/linux/elsa-2026-10739.md) | Apr 27, 2026 | | Linux | tigervnc-server RHEL 8 | 0:1.15.0-9.el8_10 | [RHSA-2026:13414](https://patchblox.com/security/data/fix/linux/rhsa-2026-13414.md) | May 15, 2026 | | Linux | tigervnc-server RHEL 9 | 0:1.15.0-7.el9_8.1 | [RHSA-2026:19342](https://patchblox.com/security/data/fix/linux/rhsa-2026-19342.md) | Apr 30, 2026 | | Linux | tigervnc-server almalinux 8 | 1.15.0-9.el8_10 | [ALSA-2026:13414](https://patchblox.com/security/data/fix/linux/alsa-2026-13414.md) | May 4, 2026 | | Linux | tigervnc-server almalinux 9 | 1.15.0-7.el9_8.1 | [ALSA-2026:19342](https://patchblox.com/security/data/fix/linux/alsa-2026-19342.md) | May 19, 2026 | | Linux | tigervnc-server amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | | Linux | tigervnc-server ol 8 | 0:1.15.0-9.el8_10 | [ELSA-2026-13414](https://patchblox.com/security/data/fix/linux/elsa-2026-13414.md) | May 5, 2026 | | Linux | tigervnc-server ol 9 | 0:1.15.0-6.el9_7.1 | [ELSA-2026-10739](https://patchblox.com/security/data/fix/linux/elsa-2026-10739.md) | Apr 27, 2026 | | Linux | tigervnc-server-debuginfo amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | | Linux | tigervnc-server-minimal RHEL 8 | 0:1.15.0-9.el8_10 | [RHSA-2026:13414](https://patchblox.com/security/data/fix/linux/rhsa-2026-13414.md) | May 15, 2026 | | Linux | tigervnc-server-minimal RHEL 9 | 0:1.15.0-7.el9_8.1 | [RHSA-2026:19342](https://patchblox.com/security/data/fix/linux/rhsa-2026-19342.md) | Apr 30, 2026 | | Linux | tigervnc-server-minimal almalinux 8 | 1.15.0-9.el8_10 | [ALSA-2026:13414](https://patchblox.com/security/data/fix/linux/alsa-2026-13414.md) | May 4, 2026 | | Linux | tigervnc-server-minimal almalinux 9 | 1.15.0-7.el9_8.1 | [ALSA-2026:19342](https://patchblox.com/security/data/fix/linux/alsa-2026-19342.md) | May 19, 2026 | | Linux | tigervnc-server-minimal amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | | Linux | tigervnc-server-minimal ol 8 | 0:1.15.0-9.el8_10 | [ELSA-2026-13414](https://patchblox.com/security/data/fix/linux/elsa-2026-13414.md) | May 5, 2026 | | Linux | tigervnc-server-minimal ol 9 | 0:1.15.0-6.el9_7.1 | [ELSA-2026-10739](https://patchblox.com/security/data/fix/linux/elsa-2026-10739.md) | Apr 27, 2026 | | Linux | tigervnc-server-minimal-debuginfo amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | | Linux | tigervnc-server-module RHEL 8 | 0:1.15.0-9.el8_10 | [RHSA-2026:13414](https://patchblox.com/security/data/fix/linux/rhsa-2026-13414.md) | May 15, 2026 | | Linux | tigervnc-server-module RHEL 9 | 0:1.15.0-7.el9_8.1 | [RHSA-2026:19342](https://patchblox.com/security/data/fix/linux/rhsa-2026-19342.md) | Apr 30, 2026 | | Linux | tigervnc-server-module almalinux 8 | 1.15.0-9.el8_10 | [ALSA-2026:13414](https://patchblox.com/security/data/fix/linux/alsa-2026-13414.md) | May 4, 2026 | | Linux | tigervnc-server-module almalinux 9 | 1.15.0-7.el9_8.1 | [ALSA-2026:19342](https://patchblox.com/security/data/fix/linux/alsa-2026-19342.md) | May 19, 2026 | | Linux | tigervnc-server-module amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | | Linux | tigervnc-server-module ol 8 | 0:1.15.0-9.el8_10 | [ELSA-2026-13414](https://patchblox.com/security/data/fix/linux/elsa-2026-13414.md) | May 5, 2026 | | Linux | tigervnc-server-module ol 9 | 0:1.15.0-6.el9_7.1 | [ELSA-2026-10739](https://patchblox.com/security/data/fix/linux/elsa-2026-10739.md) | Apr 27, 2026 | | Linux | tigervnc-server-module-debuginfo amzn 2023 | 1.14.1-3.amzn2023.0.4 | [ALAS2023-2026-1537](https://patchblox.com/security/data/fix/linux/alas2023-2026-1537.md) | Apr 13, 2026 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.