CVE-2026-107615

Summary

A local authenticated user can exploit an uncontrolled search path element vulnerability in TightVNC Server to load a malicious DLL with SYSTEM privileges. This occurs because the application loads screenhooks32.dll/screenhooks64.dll without specifying search path flags, allowing attackers to place malicious DLLs in writable directories earlier in the search order.

Exploitability

Exploitation requires local authentication and access to a writable directory in the DLL search path, making it moderately difficult but possible for attackers with user-level access to achieve SYSTEM-level code execution.

Blast radius

If exploited, this vulnerability could allow attackers to execute arbitrary code with SYSTEM privileges on Windows systems running TightVNC Server versions before 2.8.88, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to TightVNC Server 2.8.88 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.