Priority CRITICAL 93KEV
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.07254 · Published 2020-03-17 · No fix listed CWE-269
Priority LOW 34
VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior before 5.4.3) contain a privilege escalation vulnerability due to improper XPC C…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00374 · Published 2020-07-10 · No fix listed
Priority LOW 34
VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00388 · Published 2020-06-15 · No fix listed CWE-732
Priority LOW 34
For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstation for Windows (15.x before 15.5.2) the folder containing configuration files fo…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00391 · Published 2020-03-16 · Fixed in 11.0.0, 15.5.2 CWE-732
Priority LOW 34
VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00369 · Published 2018-05-29 · No fix listed
Priority LOW 32
VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01758 · Published 2018-08-13 · No fix listed CWE-125
Priority LOW 31
VMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01283 · Published 2020-10-23 · No fix listed
Priority LOW 31
VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue during install time.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00343 · Published 2020-10-16 · No fix listed
Priority LOW 30
VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser).
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00559 · Published 2021-05-24 · No fix listed CWE-125
Priority LOW 30
VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-of-check Time-of-use (…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00217 · Published 2020-05-29 · Fixed in 11.5.5 CWE-367
Priority LOW 29
VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser).
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00453 · Published 2021-05-24 · No fix listed CWE-125
Priority LOW 29
VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (JPEG2000 Parser).
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00453 · Published 2021-05-24 · No fix listed CWE-125
Priority LOW 29
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00324 · Published 2020-09-16 · No fix listed CWE-125
Priority LOW 28
TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Wind…
CVSS 2.0MEDIUM 6.1· Adjacent network · No auth · Interaction — · EPSS 0.00659 · Published 2015-06-13 · No fix listed CWE-399
Priority LOW 28
TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Win…
CVSS 2.0MEDIUM 6.1· Adjacent network · No auth · Interaction — · EPSS 0.00659 · Published 2015-06-13 · No fix listed CWE-399
Priority LOW 28
TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Win…
CVSS 2.0MEDIUM 6.1· Adjacent network · No auth · Interaction — · EPSS 0.00659 · Published 2015-06-13 · No fix listed CWE-399
Priority LOW 27
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser).
CVSS 3.1MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00301 · Published 2020-09-16 · No fix listed CWE-125
Priority LOW 27
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser).
CVSS 3.1MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00301 · Published 2020-09-16 · No fix listed CWE-125
Priority LOW 27
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser).
CVSS 3.1MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00301 · Published 2020-09-16 · No fix listed CWE-125
Priority LOW 27
TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Wind…
CVSS 2.0MEDIUM 5.8· Adjacent network · No auth · Interaction — · EPSS 0.00747 · Published 2015-06-13 · No fix listed CWE-399
Priority LOW 27
TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Win…
CVSS 2.0MEDIUM 5.8· Adjacent network · No auth · Interaction — · EPSS 0.00747 · Published 2015-06-13 · No fix listed CWE-399
Priority LOW 25
VMware Horizon Server contains an information disclosure vulnerability.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00489 · Published 2023-08-04 · No fix listed
Priority LOW 24
VMware Horizon Server contains a HTTP request smuggling vulnerability.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00465 · Published 2023-08-04 · No fix listed CWE-444
Priority LOW 18
VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-service vulnerability due to a heap-overflow issue in Cortado Thinprint.
CVSS 3.1LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00274 · Published 2020-03-17 · No fix listed CWE-787
Priority LOW 16
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00289 · Published 2020-09-16 · No fix listed CWE-787