CVE-2026-107615
Received Received - Intake

Uncontrolled Search Path Element in TightVNC Server for Windows

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: securin

Description
An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init() (and ThemeLib) load screenhooks32.dll / screenhooks64.dll with LoadLibrary() using a bare file name and no LOAD_LIBRARY_SEARCH_* flags, so the TightVNC service follows the default DLL search order and loads an attacker-planted DLL from a writable directory earlier in that order (for example, an installation directory with permissive ACLs).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-107615
EUVD
EUVD-2026-94979

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
GlavSoft TightVNC 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-427 The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before version 2.8.88. It allows a local authenticated user to execute arbitrary code with SYSTEM privileges by exploiting the way the software loads certain DLL files.

Detection Guidance

Check for TightVNC Server versions before 2.8.88. Inspect directories in the DLL search path for unexpected screenhooks32.dll or screenhooks64.dll files. Monitor for unusual SYSTEM privilege escalation attempts.

Impact Analysis

An attacker with local access could exploit this to gain full control over the affected system, install malware, steal data, or disrupt operations. Systems running vulnerable versions of TightVNC are at risk.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements for GDPR, HIPAA, and other regulations. Organizations must patch systems to maintain compliance and protect data integrity.

Mitigation Strategies

Upgrade TightVNC Server to version 2.8.88 or later. Restrict write permissions on installation directories. Ensure DLLs are loaded from secure paths only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107615. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart