Critical severity9.8NVD Advisory· Published Mar 8, 2019· Updated Jun 17, 2026

CVE-2019-8266

Description

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. User interaction is required to trigger these vulnerabilities. These vulnerabilities have been fixed in revision 1208.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Uvnc/Ultravnc
cpe:2.3:a:uvnc:ultravnc:*:*:*:*:*:*:*:*
Range: <1.2.2.3
Ultravnc/Ultravncllm-fuzzy
Range: revision 1207
Kaspersky Lab/UltraVNCv5
Range: 1.2.2.3

Patches

Vulnerability mechanics

References

ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-013-ultravnc-access-of-memory-location-after-end-of-buffer/nvdThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-927095.pdfnvd
www.us-cert.gov/ics/advisories/icsa-20-161-06nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000