Threats Tagged 'cve-2026-50538'
View all threats tagged with 'cve-2026-50538'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-50538'
Click on any threat for detailed analysis and mitigation recommendations
0 A security update for LibVNCServer addresses CVE-2026-50538, which allows malicious or man-in-the-middle VNC servers to cause a libvncclient to write attacker-controlled data beyond the framebuffer boundary. This vulnerability can result in a crash or arbitrary code execution. The issue affects specific SUSE LibVNCServer packages. No CVSS score is provided, but the severity is high. Join the discussion | GCVE Database | 09/02/2026, 09:37:55 UTC Added: 09/17/2026, 01:58:52 UTC |
CVE-2026-50538 is a heap-based buffer overflow vulnerability in LibVNCClient versions 0.9.12 through 0.9.15. A malicious or man-in-the-middle VNC server can exploit this flaw by sending a crafted FramebufferUpdate message that causes libvncclient to write attacker-controlled data beyond the framebuffer boundary. This vulnerability requires no authentication and triggers immediately upon connection, causing unconditional client crashes (denial of service) and potentially allowing remote code execution by overwriting application callback pointers. The issue is patched in a commit identified as 540332be3e0acc566fa64da6f1b4680c72c724dd. Join the discussion | CVE Database V5 | 08/21/2026, 21:03:58 UTC Added: 08/21/2026, 21:22:39 UTC |
Showing 1 to 2 of 2 results