CVE-2024-42049: Tightvnc

Critical severity, CVSS 9.1. EPSS: 2.1% chance of exploitation in the next 30 days.

TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection.

Affected products

• Tightvnc Tightvnc: before 2.8.84 (fixed in 2.8.84)

Published 2024-07-28. Last modified 2026-06-17.