critical9.1Public exploit code
CVE-2024-42049
TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TightVNC 2.8.83 - Control Pipe Manipulation2025-06-09 · local · multiple
Impact
TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| TightVNC | TightVNC (Server For Windows) | before 2.8.84 |
Versions were read from the advisory text. No structured product data has been published for this record yet.