Is CVE-2026-109833 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-109833 being exploited in the wild.

How severe is CVE-2026-109833?

Medium severity, with a CVSS score of 5.9, published 13 October 2026.

Which products and versions are affected?

Red Hat GNOME Remote Desktop 0.1.6-1 through 40.0-11.

How is CVE-2026-109833 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-109833?

Check whether you run Red Hat GNOME Remote Desktop at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-109833: GNOME Remote Desktop out-of-bounds write in VNC TLS buffer handling

CVE-2026-109833 · Severity: medium · CVSS 5.9 · Published 2026-10-13

GNOME Remote Desktop is a remote access service that enables VNC connections to Linux desktops. A flaw in how it handles TLS-encrypted VNC traffic can allow a remote attacker to write data beyond allocated buffer boundaries, causing the service to crash or become unavailable. An attacker on the network who can reach an enabled VNC TLS listener can trigger this vulnerability without authentication.

Technologies: Red Hat GNOME Remote Desktop. Vendors: Red Hat.

Quick answers

Is CVE-2026-109833 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-109833 being exploited in the wild.
How severe is CVE-2026-109833?: Medium severity, with a CVSS score of 5.9, published 13 October 2026.
Which products and versions are affected?: Red Hat GNOME Remote Desktop 0.1.6-1 through 40.0-11.
Is there a fix for CVE-2026-109833?: No fixed version is recorded yet. Disable the VNC service in gnome-remote-desktop if it is not required. If VNC must remain enabled, restrict the VNC listener to trusted hosts or management networks using host-based firewall rules. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-109833 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-109833?: Check whether you run Red Hat GNOME Remote Desktop at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Disable the VNC service in gnome-remote-desktop if it is not required. If VNC must remain enabled, restrict the VNC listener to trusted hosts or management networks using host-based firewall rules.

Technical details

The vulnerability is an out-of-bounds write (CWE-121) in the VNC TLS read path: partial consumption of an internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of compacting the peek buffer, causing a heap buffer overflow. A remote attacker with network access to an enabled VNC TLS listener can trigger the flaw by inducing a peek/read size mismatch, leading to denial of service. Red Hat has rated this as medium severity due to the specific preconditions required for exploitation.

Affected products

Red Hat GNOME Remote Desktop 0.1.6-1 through 40.0-11

Timeline

2026-10-13: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.