Read the docs

VMware

Records1182All Threatist records
Exploited (KEV)41In CISA KEV
CVSS critical188CVSS 9.0–10.0
CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

25 records in Horizon Client · all components

Priority CRITICAL 93KEV

VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.07254 Published 2020-03-17 No fix listed CWE-269
Priority LOW 34

VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00388 Published 2020-06-15 No fix listed CWE-732
Priority LOW 34

For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstation for Windows (15.x before 15.5.2) the folder containing configuration files fo…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00391 Published 2020-03-16 Fixed in 11.0.0, 15.5.2 CWE-732
Priority LOW 32

VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01758 Published 2018-08-13 No fix listed CWE-125
Priority LOW 30

VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-of-check Time-of-use (…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00217 Published 2020-05-29 Fixed in 11.5.5 CWE-367
Priority LOW 29

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00324 Published 2020-09-16 No fix listed CWE-125
Priority LOW 28

TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Wind…

CVSS 2.0MEDIUM 6.1 Adjacent network No auth Interaction — EPSS 0.00659 Published 2015-06-13 No fix listed CWE-399
Priority LOW 28

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Win…

CVSS 2.0MEDIUM 6.1 Adjacent network No auth Interaction — EPSS 0.00659 Published 2015-06-13 No fix listed CWE-399
Priority LOW 28

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Win…

CVSS 2.0MEDIUM 6.1 Adjacent network No auth Interaction — EPSS 0.00659 Published 2015-06-13 No fix listed CWE-399
Priority LOW 27

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser).

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00301 Published 2020-09-16 No fix listed CWE-125
Priority LOW 27

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser).

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00301 Published 2020-09-16 No fix listed CWE-125
Priority LOW 27

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser).

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00301 Published 2020-09-16 No fix listed CWE-125
Priority LOW 27

TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Wind…

CVSS 2.0MEDIUM 5.8 Adjacent network No auth Interaction — EPSS 0.00747 Published 2015-06-13 No fix listed CWE-399
Priority LOW 27

TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Win…

CVSS 2.0MEDIUM 5.8 Adjacent network No auth Interaction — EPSS 0.00747 Published 2015-06-13 No fix listed CWE-399
Priority LOW 18

VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-service vulnerability due to a heap-overflow issue in Cortado Thinprint.

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00274 Published 2020-03-17 No fix listed CWE-787
Priority LOW 16

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00289 Published 2020-09-16 No fix listed CWE-787
Open these records in search →