{"id":"CVE-2019-8274","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-8274","generatedAt":"2026-10-27T22:23:56.622Z","title":"UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution.","description":"UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.","published":"2019-03-08T23:29:01.000Z","lastModified":"2026-06-17T02:41:48.000Z","status":"Modified","sourceIdentifier":"vulnerability@kaspersky.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-122","CWE-787"],"affected":["uvnc/ultravnc","siemens/sinumerik access mymachine\\/p2p","siemens/sinumerik pcu base win10 software\\/ipc","siemens/sinumerik pcu base win7 software\\/ipc"],"epss":{"score":0.08263,"percentile":0.94872,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (8.26%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf","tags":["Third Party Advisory"],"source":"vulnerability@kaspersky.com"},{"url":"https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-021-ultravnc-heap-based-buffer-overflow/","tags":["Third Party Advisory"],"source":"vulnerability@kaspersky.com"},{"url":"https://www.us-cert.gov/ics/advisories/icsa-20-161-06","tags":["Third Party Advisory","US Government Resource"],"source":"vulnerability@kaspersky.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-021-ultravnc-heap-based-buffer-overflow/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.us-cert.gov/ics/advisories/icsa-20-161-06","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-8274","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}