News
vulnerability VU#644655: TightVNC and UltraVNC Viewer contains a heap-based buffer overflow - CERT/CC Vulnerability Notes cybersecurity New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks - BleepingComputer cybersecurity Getting Past the Post-Quantum Cryptography Discovery Phase - Dark Reading cybersecurity Hackers compromise 4,800 GitHub accounts to steal cloud credentials - BleepingComputer vulnerability USN-9090-1: Apache HTTP Server vulnerabilities - Ubuntu Security Notices cybersecurity Cyber Experts Weigh In: How to Fight Artex & AntiFox - Dark Reading vulnerability USN-9088-1: TigerVNC vulnerability - Ubuntu Security Notices vulnerability USN-9072-1: IMAPFilter vulnerability - Ubuntu Security Notices ai Nvidia privately confirmed it could track chips to fight smuggling, even as industry publicly questioned feasibility - MIT Technology Review cybersecurity Extortion Group Luna Moth Flits Into Law Firms a Second Time - Dark Reading vulnerability USN-8895-2: Sudo vulnerability - Ubuntu Security Notices cybersecurity Major Microsoft Outlook Outage Leaves People With Email Jobs Unable to Email - Wired Security ai How Amplitude ships product improvements in 1–2 days with OpenAI - OpenAI - ChatGPT & AI Research ai How Amplitude ships product improvements in 1–2 days with OpenAI - OpenAI - ChatGPT & AI Research cybersecurity New N-able "4EverAble2Shell" zero-day exploited hours after PoC released - BleepingComputer
1 / 15
All news ›
Vulnerability

USN-9088-1: TigerVNC vulnerability

Ubuntu Security Notices ·

It was discovered that the TigerVNC viewer stored TLS certificate exceptions as trusted certificate authorities. A remote attacker could possibly use this issue to impersonate any VNC server after a user had added a certificate exception for the attacker's server.

Continue on Ubuntu Security Notices ↗ ‹ All news Get the newsletter

The summary and image come from Ubuntu Security Notices; the image is shown from their website.