UltraVNC vulnerabilities
We track 3 vulnerabilities in UltraVNC products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 27, 2026.
Latest UltraVNC vulnerabilities
- 7.0 High severity
UltraVNC: Untrusted Search Path
A security flaw has been discovered in UltraVNC up to 1.6.4.0. Affected by this issue is some unknown functionality in the library version.dll of the component Service. The manipulation results in uncontrolled search path. The attack needs to be approached loc
- 7.0 High severity
UltraVNC: Untrusted Search Path
A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase.dll of the component Windows Service. This manipulation causes uncontrolled search path. The attack requires local access. A high degree of
- 7.8 High severity
UltraVNC: Improper Privilege Management
UltraVNC is a free and open source remote pc access software. A vulnerability has been found in versions prior to 1.3.8.0 in which the DSM plugin module, which allows a local authenticated user to achieve local privilege escalation (LPE) on a vulnerable system