How many CVEs does uvnc have?

uvnc has 41 published CVE records since 2019, including 18 in the last two years.

How many uvnc CVEs are in CISA KEV?

None of uvnc's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which uvnc products have the most CVEs?

The uvnc products with the most published CVEs are UltraVNC, PCHelpWareV2, UltraVNC Launcher, UltraVNC Viewer.

What are the most common weakness types in uvnc CVEs?

uvnc's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-121 (Stack-based Buffer Overflow), CWE-787 (Out-of-bounds Write), CWE-122 (Heap-based Buffer Overflow).

Are there public exploits for uvnc vulnerabilities?

Yes — 7 of uvnc's CVEs have a known public exploit.

How many critical uvnc vulnerabilities are there?

uvnc has 17 critical and 14 high-severity CVEs.

What is the average severity of uvnc CVEs?

The average CVSS base score across uvnc's scored CVEs is 8.2.

RadicalNotion.AI

Log in Create an account

41 CVEs

uvnc Vulnerabilities

Name: uvnc vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for uvnc.

41

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

7

Public exploits

PoC or exploit code

8.2

Avg CVSS

2019–2026

Overview

uvnc has 41 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

Security scorecard

A quick read on uvnc's vulnerability posture, as a share of its 41 published CVEs.

Average CVSS: 8.2
Critical / high: 76%
Actively exploited (KEV): 0%
Public exploit available: 17%
Patch available: 56%

Severity and exploitation

How the CVSS severity of uvnc's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical17

High14

Medium9

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of uvnc's CVEs are currently listed in CISA's KEV catalog.

Public exploits

7

7 of uvnc's CVEs have a known public exploit available.

Most affected products

The uvnc products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in uvnc CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish uvnc CVE records.

Disclosure activity by year

How many uvnc CVEs were published each year.

2019

22

2022

1

2026

18

Latest uvnc CVEs

The most recently disclosed vulnerabilities affecting uvnc.

UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)
CWE-787
Critical · CVSS 9.3
EPSS 2.6%2026-07-01
UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access
CWE-798
Critical · CVSS 9.1
EPSS 0.7%2026-07-01
UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length
CWE-190
High · CVSS 8.7
EPSS 1.9%2026-07-01
UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing
CWE-193
High · CVSS 7.5
EPSS 0.7%2026-07-01
UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception
CWE-326
High · CVSS 7.4
EPSS 0.3%2026-07-01
UltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token
CWE-787
High · CVSS 7.2
EPSS 0.9%2026-07-01
UltraVNC repeater integer overflow in win_log malloc leading to heap overflow
CWE-190
Medium · CVSS 5.3
EPSS 1.4%2026-07-01
UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes
CWE-338
Medium · CVSS 6.5
EPSS 0.4%2026-07-01
UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated
CWE-125
Medium · CVSS 6.5
EPSS 0.4%2026-07-01
UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check
CWE-193
Low · CVSS 3.7
EPSS 0.5%2026-07-01
UltraVNC Service version.dll uncontrolled search path
CWE-427
High · CVSS 7.3
EPSS 0.2%2026-03-27
UltraVNC Launcher 1.2.2.4 Denial of Service Buffer Overflow
CWE-787
Medium · CVSS 6.9
EPSS 0.3%2026-03-22

Get an alert for each new uvnc CVE, with AI-written analysis and remediation steps.

Monitor uvnc CVEs

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about uvnc vulnerabilities.

How many CVEs does uvnc have?: uvnc has 41 published CVE records since 2019, including 18 in the last two years.
How many uvnc CVEs are in CISA KEV?: None of uvnc's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which uvnc products have the most CVEs?: The uvnc products with the most published CVEs are UltraVNC, PCHelpWareV2, UltraVNC Launcher, UltraVNC Viewer.
What are the most common weakness types in uvnc CVEs?: uvnc's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-121 (Stack-based Buffer Overflow), CWE-787 (Out-of-bounds Write), CWE-122 (Heap-based Buffer Overflow).
Are there public exploits for uvnc vulnerabilities?: Yes — 7 of uvnc's CVEs have a known public exploit.
How many critical uvnc vulnerabilities are there?: uvnc has 17 critical and 14 high-severity CVEs.
What is the average severity of uvnc CVEs?: The average CVSS base score across uvnc's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track uvnc vulnerabilities

Get an alert for each new uvnc CVE, with AI-written analysis and remediation steps.

Create an account See pricing