Uncontrolled Search Path Vulnerability in UltraVNC by UltraVNC

CVE-2026-3787

What is CVE-2026-3787?

A vulnerability has been discovered in UltraVNC 1.6.4.0 for Windows, specifically within an unknown function of the cryptbase.dll library associated with the Windows Service component. This flaw results in an uncontrolled search path issue. Attackers with local access could potentially manipulate the system, though exploiting this vulnerability involves a significant level of complexity. The vendor has been notified about this issue; however, there has been no response. For further technical details, please refer to related vulnerability databases.

References