RHSA-2025:2861

Vulnerability from csaf_opensuse - Published: 2025-03-17 00:00 - Updated: 2026-09-20 11:53
Summary
security update for tigervnc
Severity
Important
Notes
Title of the patch: security update for tigervnc
Description of the patch: This security update provides a functional equivalent of RHSA-2025:2861. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2025:2861.
Patchnames: RHSA-2025:2861
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2025-26594
7.8 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2025-26595
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 7 products, the same list as for CVE-2025-26594
Threats
Impact moderate
CVE-2025-26596
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Recommended 7 products, the same list as for CVE-2025-26594
Threats
Impact moderate
CVE-2025-26597
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 7 products, the same list as for CVE-2025-26594
Threats
Impact moderate
CVE-2025-26598
5.3 (Medium)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L
Affected products
Recommended 7 products, the same list as for CVE-2025-26594
Threats
Impact moderate
CVE-2025-26599
5.3 (Medium)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L
Affected products
Recommended 7 products, the same list as for CVE-2025-26594
Threats
Impact moderate
CVE-2025-26600
7 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 7 products, the same list as for CVE-2025-26594
Threats
Impact important
CVE-2025-26601
7 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 7 products, the same list as for CVE-2025-26594
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/r… self
https://lists.suse.com/pipermail/suse-liberty-lin… self
https://lists.suse.com/pipermail/suse-liberty-lin… self
https://www.suse.com/security/cve/CVE-2025-26594/ self
https://www.suse.com/security/cve/CVE-2025-26595/ self
https://www.suse.com/security/cve/CVE-2025-26596/ self
https://www.suse.com/security/cve/CVE-2025-26597/ self
https://www.suse.com/security/cve/CVE-2025-26598/ self
https://www.suse.com/security/cve/CVE-2025-26599/ self
https://www.suse.com/security/cve/CVE-2025-26600/ self
https://www.suse.com/security/cve/CVE-2025-26601/ self
https://www.suse.com/security/cve/CVE-2025-26594 external
https://bugzilla.suse.com/1237427 external
https://www.suse.com/security/cve/CVE-2025-26595 external
https://bugzilla.suse.com/1237429 external
https://www.suse.com/security/cve/CVE-2025-26596 external
https://bugzilla.suse.com/1237430 external
https://www.suse.com/security/cve/CVE-2025-26597 external
https://bugzilla.suse.com/1237431 external
https://bugzilla.suse.com/1266296 external
https://www.suse.com/security/cve/CVE-2025-26598 external
https://bugzilla.suse.com/1237432 external
https://www.suse.com/security/cve/CVE-2025-26599 external
https://bugzilla.suse.com/1237433 external
https://www.suse.com/security/cve/CVE-2025-26600 external
https://bugzilla.suse.com/1237434 external
https://www.suse.com/security/cve/CVE-2025-26601 external
https://bugzilla.suse.com/1237435 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for tigervnc",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2025:2861.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:2861.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2025:2861",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_2861.json"
      },
      {
        "category": "self",
        "summary": "URL for RHSA-2025:2861",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-March/000988.html"
      },
      {
        "category": "self",
        "summary": "E-Mail link for RHSA-2025:2861",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-March/000988.html"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-26594 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-26594/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-26595 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-26595/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-26596 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-26596/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-26597 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-26597/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-26598 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-26598/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-26599 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-26599/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-26600 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-26600/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-26601 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-26601/"
      }
    ],
    "title": "security update for tigervnc",
    "tracking": {
      "current_release_date": "2026-09-20T11:53:06Z",
      "generator": {
        "date": "2025-03-17T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2025:2861",
      "initial_release_date": "2025-03-17T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-03-17T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:53:06Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-icons-0:1.8.0-36.el7_9.noarch",
                "product": {
                  "name": "tigervnc-icons-0:1.8.0-36.el7_9.noarch",
                  "product_id": "tigervnc-icons-0:1.8.0-36.el7_9.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/tigervnc-icons@1.8.0-36.el7_9?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-license-0:1.8.0-36.el7_9.noarch",
                "product": {
                  "name": "tigervnc-license-0:1.8.0-36.el7_9.noarch",
                  "product_id": "tigervnc-license-0:1.8.0-36.el7_9.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/tigervnc-license@1.8.0-36.el7_9?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
                "product": {
                  "name": "tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
                  "product_id": "tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/tigervnc-server-applet@1.8.0-36.el7_9?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-0:1.8.0-36.el7_9.x86_64",
                "product": {
                  "name": "tigervnc-0:1.8.0-36.el7_9.x86_64",
                  "product_id": "tigervnc-0:1.8.0-36.el7_9.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:tigervnc:tigervnc:1.8.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tigervnc@1.8.0-36.el7_9?arch=x86_64\u0026upstream=tigervnc-0:1.8.0-36.el7_9.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-0:1.8.0-36.el7_9.x86_64",
                "product": {
                  "name": "tigervnc-server-0:1.8.0-36.el7_9.x86_64",
                  "product_id": "tigervnc-server-0:1.8.0-36.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/tigervnc-server@1.8.0-36.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
                "product": {
                  "name": "tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
                  "product_id": "tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/tigervnc-server-minimal@1.8.0-36.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-module-0:1.8.0-36.el7_9.x86_64",
                "product": {
                  "name": "tigervnc-server-module-0:1.8.0-36.el7_9.x86_64",
                  "product_id": "tigervnc-server-module-0:1.8.0-36.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/tigervnc-server-module@1.8.0-36.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7 LTSS",
                "product": {
                  "name": "SUSE Liberty Linux 7 LTSS",
                  "product_id": "SUSE Liberty Linux 7 LTSS"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.8.0-36.el7_9.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64"
        },
        "product_reference": "tigervnc-0:1.8.0-36.el7_9.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-icons-0:1.8.0-36.el7_9.noarch as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch"
        },
        "product_reference": "tigervnc-icons-0:1.8.0-36.el7_9.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-license-0:1.8.0-36.el7_9.noarch as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch"
        },
        "product_reference": "tigervnc-license-0:1.8.0-36.el7_9.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.8.0-36.el7_9.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64"
        },
        "product_reference": "tigervnc-server-0:1.8.0-36.el7_9.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-applet-0:1.8.0-36.el7_9.noarch as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch"
        },
        "product_reference": "tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64"
        },
        "product_reference": "tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.8.0-36.el7_9.x86_64 as component of SUSE Liberty Linux 7 LTSS",
          "product_id": "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
        },
        "product_reference": "tigervnc-server-module-0:1.8.0-36.el7_9.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-26594",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-26594"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-26594",
          "url": "https://www.suse.com/security/cve/CVE-2025-26594"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237427 for CVE-2025-26594",
          "url": "https://bugzilla.suse.com/1237427"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-26594"
    },
    {
      "cve": "CVE-2025-26595",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-26595"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-26595",
          "url": "https://www.suse.com/security/cve/CVE-2025-26595"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237429 for CVE-2025-26595",
          "url": "https://bugzilla.suse.com/1237429"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-26595"
    },
    {
      "cve": "CVE-2025-26596",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-26596"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-26596",
          "url": "https://www.suse.com/security/cve/CVE-2025-26596"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237430 for CVE-2025-26596",
          "url": "https://bugzilla.suse.com/1237430"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-26596"
    },
    {
      "cve": "CVE-2025-26597",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-26597"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-26597",
          "url": "https://www.suse.com/security/cve/CVE-2025-26597"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237431 for CVE-2025-26597",
          "url": "https://bugzilla.suse.com/1237431"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266296 for CVE-2025-26597",
          "url": "https://bugzilla.suse.com/1266296"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-26597"
    },
    {
      "cve": "CVE-2025-26598",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-26598"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-26598",
          "url": "https://www.suse.com/security/cve/CVE-2025-26598"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237432 for CVE-2025-26598",
          "url": "https://bugzilla.suse.com/1237432"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-26598"
    },
    {
      "cve": "CVE-2025-26599",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-26599"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-26599",
          "url": "https://www.suse.com/security/cve/CVE-2025-26599"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237433 for CVE-2025-26599",
          "url": "https://bugzilla.suse.com/1237433"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-26599"
    },
    {
      "cve": "CVE-2025-26600",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-26600"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-26600",
          "url": "https://www.suse.com/security/cve/CVE-2025-26600"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237434 for CVE-2025-26600",
          "url": "https://bugzilla.suse.com/1237434"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-26600"
    },
    {
      "cve": "CVE-2025-26601",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-26601"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger() is called. If one of the changes triggers an error, the function will return early, not adding the new sync object, possibly causing a use-after-free when the alarm eventually triggers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
          "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-26601",
          "url": "https://www.suse.com/security/cve/CVE-2025-26601"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237435 for CVE-2025-26601",
          "url": "https://bugzilla.suse.com/1237435"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7 LTSS:tigervnc-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-icons-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-license-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-applet-0:1.8.0-36.el7_9.noarch",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-minimal-0:1.8.0-36.el7_9.x86_64",
            "SUSE Liberty Linux 7 LTSS:tigervnc-server-module-0:1.8.0-36.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-26601"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.