VYPR
← All advisories
Critical severity9.0NVD Advisory· Published Apr 12, 2023· Updated Jun 17, 2026

CVE-2023-27830

CVE-2023-27830

Description

TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Tightvnc/Tightvnc3 versions
    cpe:2.3:a:tightvnc:tightvnc:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tightvnc:tightvnc:*:*:*:*:*:*:*:*range: <2.8.75
    • (no CPE)
    • (no CPE)range: <2.8.75

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.