# libvncserver security updates

Patch Radar has 22 security fixes for libvncserver, closing 18 CVEs. The newest is DEBIAN-CVE-2026-50538 (0.9.14+dfsg-1+deb12u2), released June 24, 2026.

- Web page: https://patchblox.com/security/product/linux/libvncserver
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-50538](https://patchblox.com/security/data/fix/linux/debian-cve-2026-50538.md) | Jun 24, 2026 | Debian 12.15 (bookworm) 0.9.14+dfsg-1+deb12u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-50538](https://patchblox.com/security/data/fix/linux/debian-cve-2026-50538.md) | Jun 24, 2026 | Debian 13.5 (trixie) 0.9.15+dfsg-1+deb13u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-50538](https://patchblox.com/security/data/fix/linux/debian-cve-2026-50538.md) | Jun 24, 2026 | Debian 14 0.9.15+dfsg-6 | High | 1 | 0 |
| [DEBIAN-CVE-2026-44988](https://patchblox.com/security/data/fix/linux/debian-cve-2026-44988.md) | Jun 24, 2026 | Debian 14 0.9.15+dfsg-5 | High | 1 | 0 |
| [DEBIAN-CVE-2026-44988](https://patchblox.com/security/data/fix/linux/debian-cve-2026-44988.md) | Jun 24, 2026 | Debian 12.15 (bookworm) 0.9.14+dfsg-1+deb12u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-44988](https://patchblox.com/security/data/fix/linux/debian-cve-2026-44988.md) | Jun 24, 2026 | Debian 13.5 (trixie) 0.9.15+dfsg-1+deb13u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-32854](https://patchblox.com/security/data/fix/linux/debian-cve-2026-32854.md) | Mar 24, 2026 | Debian 14 0.9.15+dfsg-3 | High | 1 | 0 |
| [DEBIAN-CVE-2026-32854](https://patchblox.com/security/data/fix/linux/debian-cve-2026-32854.md) | Mar 24, 2026 | Debian 12.15 (bookworm) 0.9.14+dfsg-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-32854](https://patchblox.com/security/data/fix/linux/debian-cve-2026-32854.md) | Mar 24, 2026 | Debian 13.5 (trixie) 0.9.15+dfsg-1+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-32853](https://patchblox.com/security/data/fix/linux/debian-cve-2026-32853.md) | Mar 24, 2026 | Debian 14 0.9.15+dfsg-3 | High | 1 | 0 |
| [DEBIAN-CVE-2026-32853](https://patchblox.com/security/data/fix/linux/debian-cve-2026-32853.md) | Mar 24, 2026 | Debian 12.15 (bookworm) 0.9.14+dfsg-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-32853](https://patchblox.com/security/data/fix/linux/debian-cve-2026-32853.md) | Mar 24, 2026 | Debian 13.5 (trixie) 0.9.15+dfsg-1+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2019-15690](https://patchblox.com/security/data/fix/linux/debian-cve-2019-15690.md) | Jan 24, 2025 | Debian 12.15 (bookworm) 0.9.12+dfsg-9 | High | 1 | 0 |
| [DEBIAN-CVE-2019-15690](https://patchblox.com/security/data/fix/linux/debian-cve-2019-15690.md) | Jan 24, 2025 | Debian 13.5 (trixie) 0.9.12+dfsg-9 | High | 1 | 0 |
| [DEBIAN-CVE-2019-15690](https://patchblox.com/security/data/fix/linux/debian-cve-2019-15690.md) | Jan 24, 2025 | Debian 14 0.9.12+dfsg-9 | High | 1 | 0 |
| [DEBIAN-CVE-2020-29260](https://patchblox.com/security/data/fix/linux/debian-cve-2020-29260.md) | Sep 2, 2022 | Debian 12.15 (bookworm) 0.9.13+dfsg-5 | High | 1 | 0 |
| [DEBIAN-CVE-2020-29260](https://patchblox.com/security/data/fix/linux/debian-cve-2020-29260.md) | Sep 2, 2022 | Debian 13.5 (trixie) 0.9.13+dfsg-5 | High | 1 | 0 |
| [DEBIAN-CVE-2020-29260](https://patchblox.com/security/data/fix/linux/debian-cve-2020-29260.md) | Sep 2, 2022 | Debian 14 0.9.13+dfsg-5 | High | 1 | 0 |
| [RHSA-2021:1811](https://patchblox.com/security/data/fix/linux/rhsa-2021-1811.md) | May 18, 2021 | RHEL 8 0:0.9.11-17.el8 | High | 5 | 0 |
| [RHSA-2020:3385](https://patchblox.com/security/data/fix/linux/rhsa-2020-3385.md) | Aug 10, 2020 | RHEL 8 0:0.9.11-15.el8_2.1 | High | 1 | 0 |
| [RHSA-2020:1766](https://patchblox.com/security/data/fix/linux/rhsa-2020-1766.md) | Apr 28, 2020 | RHEL 8 0:0.9.11-14.el8 | Routine | 5 | 0 |
| [RHSA-2020:0920](https://patchblox.com/security/data/fix/linux/rhsa-2020-0920.md) | Mar 23, 2020 | RHEL 8 0:0.9.11-9.el8_1.2 | High | 2 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo