<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: realvnc</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2013-6886: RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to</title><link>https://patchthecve.com/cve/CVE-2013-6886.html</link><guid>https://patchthecve.com/cve/CVE-2013-6886.html</guid><pubDate>Wed, 17 Jun 2026 00:01:05 +0000</pubDate><description>HIGH 7.2: RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to the (1) vncserver, (2) vncserver-x11, or (3) Xvnc helper.</description></item><item><title>CVE-2008-4770: The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, E</title><link>https://patchthecve.com/cve/CVE-2008-4770.html</link><guid>https://patchthecve.com/cve/CVE-2008-4770.html</guid><pubDate>Tue, 16 Jun 2026 22:58:30 +0000</pubDate><description>HIGH 10.0: The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to &quot;encoding type.&quot;</description></item><item><title>CVE-2006-2369: RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote a</title><link>https://patchthecve.com/cve/CVE-2006-2369.html</link><guid>https://patchthecve.com/cve/CVE-2006-2369.html</guid><pubDate>Tue, 16 Jun 2026 22:24:52 +0000</pubDate><description>HIGH 7.5: RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as &quot;Type 1 - None&quot;, which is accepted even if it is not offered by the server, as</description></item><item><title>CVE-2004-1750: RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of con</title><link>https://patchthecve.com/cve/CVE-2004-1750.html</link><guid>https://patchthecve.com/cve/CVE-2004-1750.html</guid><pubDate>Tue, 16 Jun 2026 22:08:19 +0000</pubDate><description>MEDIUM 5.0: RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of connections to port 5900.</description></item></channel></rss>