https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T12:38:32.958302+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-107613 CVE-2026-107613 — NULL pointer dereference in TightVNC Server Win8ScreenDriver after failed DXGI re-initialization 2026-10-10T12:38:32.960301+00:00

Affected: GlavSoft TightVNC

A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails in applyNewScreenProperties() (for example after a GPU reset, display hot-plug or session change), m_drvImpl is left NULL and is subsequently dereferenced without a check by executeDetection(), getScreenBuffer(), grabFb(), getScreenPropertiesChanged() and getCursorPosition().