CVE-2025-26594

7.8

HIGHCVSS v3

Published

February 25, 2025

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free.

TigerVNC/tigervnc

GitHubHigh performance, multi-platform VNC client and server

all versionsNVD

CendioOssman/tigervnc

GitHub

all versionsNVD

TigerVNC

Chocolatey

More on this CVE

NVD↗GitHub Advisory↗

## tigervnc TigerVNC is a high-performance, platform-neutral implementation of VNC (Virtual Network Computing), a client/server application that allows users to launch and interact with graphical applications on remote machines. TigerVNC provides the levels of performance necessary to run 3D and video applications, and it attempts to maintain a common look and feel and re-use components, where possible, across the various platforms that it supports. TigerVNC also provides extensions for advanced authentication methods and TLS encryption. ### Package-specific issue If this package isn't up-to-date for some days, [Create an issue](https://github.com/tunisiano187/Chocolatey-packages/issues/new/choose) Support the package maintainer and [![Patreon](https://cdn.jsdelivr.net/gh/tunisiano187/Chocolatey-packages@d15c4e19c709e7148588d4523ffc6dd3cd3c7e5e/icons/patreon.png)](https://www.patreon.com/bePatron?u=39585820)

all versionsNVD

tigervnc

NPMTigerVNC binaries as a node module

all versionsNVD

Security Advisories

CVE-2025-26594

Description

More on this CVE