CVE-2020-37132: Uvnc Ultravnc

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allows local attackers to crash the application. Attackers can paste an overly long 300-character string into the password field to trigger an application crash and prevent normal launcher functionality.

Affected products

• Uvnc Ultravnc: up to and including 1.2.4.0

Published 2026-02-05. Last modified 2026-06-17.