Minimum OS: Windows 7

logo

UltraVNC 1.8.3.2

Release summary — October 2026

 

Changelog

UltraVNC 1.8.3.2

  • Security updates (viewer)

  • Precision wheel extension

  • Mismatching create directory buffer length between client and server fix

  • Allow viewer to cancel a server-to-viewer file transfer

  • Harden buffer against overflow

  • Security: WebSocket overflow fix, file-transfer root gaps, retire MS-Logon II

  • vnchttpconnect: Unsigned WebSocket frame length check, reject MSB-set 64-bit lengths, cap control frames at 125 bytes (fixes heap overflow reachable pre-auth on the HTTP port)

  • vncclient: Enforce FileTransferRoot on download, dir listing, mkdir, delete and rename (was upload-only); reject '[ .. ]' dir names in ZipPossibleDirectory

  • vncclient: Gate rfbFileChecksums on FT enabled + pending upload, free prior m_lpCSBuffer, bound length by file size

  • vncclient: View-only clients can no longer write the server clipboard or change display resolution

  • Retire MS-Logon II (31-bit DH, time-seeded rand): no longer advertised, legacy viewers get an upgrade message via AuthMsLogonReject

  • vncauth: Challenge bytes from BCryptGenRandom instead of rand()

  • setpasswd: random passwords from BCryptGenRandom with rejection sampling instead of rand() seeded by install time

  • TextChat: Reject negative chat lengths as protocol errors

  • DSMPlugin: Load plugin only from the exe dir via LoadLibraryEx with LOAD_LIBRARY_SEARCH flags; reject names with path separators

  • rdr/ZstdInStream: Throw on zero decompression progress (viewer DoS)

  • Repeater: Mode 1 allow-list uses exact resolved-IP match (was strstr prefix, allowed e.g. 10.0.0.150 when 10.0.0.1 was listed); refuse list exact IP match

  • Repeater: do_repeater uses stack fd_set (FD_ALLOC under-allocated and leaked on Windows)



SHA256 hashes:

SHA256 hash of UltraVNC_1832_x86_Setup.exe:
dd35493b09a3c158d1d7dcd5a423c509b0b55610a93358309c757c4b55d592fa

SHA256 hash of UltraVNC_1832_x64_Setup.exe:
ae1bb545c59e082620997d98589e3aef871e71494cb100144c95608c8323b4f7

SHA256 hash of UltraVNC_1832.zip:
8984e920169238de2a878ca3af71b7b8ac4feb3bbe295916dcd3ff1219456aad

SHA256 hash of UltraVNC_1832_x86_Setup.msi:
5d8a968bf8dd1e030fd597d0b296ec2e17fa61cdfb1d8c46bd623914d665f549

SHA256 hash of UltraVNC_1832_x64_Setup.msi:
7af13058d9f5216438eaee5711ef7d9edace127a25a50afa191b3557530bc3cc



DOWNLOADS

INSTALLERS

Downloads:
binaryUltraVNC 1.8.3.2 x86 Installer 1.8.3.2 HOT

UltraVNC 1.8.3.2 x86 Installer

License GNU/GPL link_extern
File Size 5446360
Download 5,831
Download

binaryUltraVNC 1.8.3.2 x64 Installer 1.8.3.2 HOT

UltraVNC 1.8.3.2 x64 Installer

License GNU/GPL link_extern
File Size 6240608
Download 8,747
Download

binaryUltraVNC 1.8.3.2 x86 MSI 1.8.3.2 HOT

UltraVNC 1.8.3.2 x86 MSI

License GNU/GPL link_extern
File Size 6004736
Download 250
Download

binaryUltraVNC 1.8.3.2 x64 MSI 1.8.3.2 HOT

UltraVNC 1.8.3.2 x64 MSI

License GNU/GPL link_extern
File Size 6795264
Download 728
Download

Zipped x86/x64 binaries

zipUltraVNC 1.8.3.2 (ZIP) x86 x64 1.8.3.2 HOT

UltraVNC 1.8.3.2 (ZIP) x86 x64

License GNU/GPL link_extern
File Size 17239681
Download 1,184
Download



Changelog

UltraVNC 1.8.3.1

  • Blank viewer on locked desktop for ExtendedDesktopSize clients fix

  • Precision wheel extension

  • Use 32-bit alpha for RichCursor mask to fix faint cursor edges

  • FileTransfer Delete Cancelation deletes file

  • Repeater bug fix

  • vncviewer: type the local clipboard as keystrokes

UltraVNC 1.8.3.0

  • noVNC support multi-monitors

  • RealVNC Viewer support fix

  • XZ encoder fix

  • Translation updates

  • Clipboard (HTML and BITMAP) fix

UltraVNC 1.8.2.9

  • Purple halo that appeared around the mouse cursor fix

  • Info messages (-InfoMsg) now display non-ASCII characters correctly

  • Command-line options are now correctly re-applied when loading per-connection settings in the Viewer

  • Crash/stability issue fixed when the Server detects the operating system version

UltraVNC 1.8.2.8

Security

  • A heap overflow in Tight JPEG decoding and hardened the Viewer against malformed screen updates sent by a Server fix

Improvements & fixes

  • -fullscreen now automatically hides the toolbar — No need for the -notoolbar workaround

  • -logfile now accepts paths containing spaces (e.g., C:\Program Files\uvnc.log)

  • Info messages (-InfoMsg) now support non-ASCII characters (UTF-8)

  • Detection of empty and encrypted-empty passwords fix

  • A network interruption (error 10004) being incorrectly reported as a system error fix

  • The Viewer now correctly refreshes the screen when returning from dormant mode

  • Various screen handling fixes

UltraVNC 1.8.2.5/1.8.2.6

New features

  • Viewer passwords can now be saved securely in the Windows Credential Manager and are reused automatically on the next connection

  • noVNC web-based Viewer with TLS support adding

  • File transfer: deleting multiple files at once works again, and file transfer with older Viewers is supported

  • Portable mode: The server keeps running headless on systems without an explorer shell (e.g., WinPE)

Improvements & fixes

  • The server no longer restarts when encryption is activated

  • Horizontal scrolling in the Viewer fix

  • Clipboard synchronization issues fix

  • Display sizing on Windows 7 and improved automatic window sizing fix

  • Quotes inside passwords can now be escaped on the command line (vncviewer.exe - password "123\"456")

  • MS-Logon authentication (timeout, screen position) fixes

  • A service running under a custom service name no longer reads ultravnc.ini

  • Complete German translation for the server dialogs; all language files synchronized; dialog text enlarged so translations display properly

Security

  • Security audit hardening: file-transfer paths pinned, safer DLL loading, and hardened service command handling

  

License

GNU GENERAL PUBLIC LICENSE (GPL)

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.

https://www.gnu.org/licenses