Read the docs

VMware

Records1182All Threatist records
Exploited (KEV)41In CISA KEV
CVSS critical188CVSS 9.0–10.0
CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Horizon View · all components

Priority MEDIUM 50

VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04859 Published 2017-06-08 Fixed in 4.5.0 CWE-77
Priority MEDIUM 49

VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03764 Published 2017-06-08 Fixed in 2.8.1, 7.1.0 +1 CWE-119
TI-2017-03069 CVE-2017-4937 · GHSA-fvrv-wxg5-6w3x

Out-of-bounds read in VMware Workstation

Priority LOW 34

VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00393 Published 2017-11-17 Fixed in 12.5.8, 4.6.1 CWE-125
TI-2017-03068 CVE-2017-4936 · GHSA-gvx8-5rvg-hjxw

Out-of-bounds read in VMware Workstation

Priority LOW 34

VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00393 Published 2017-11-17 Fixed in 12.5.8, 4.6.1 CWE-125
TI-2017-03067 CVE-2017-4935 · GHSA-vhq3-56w6-j6mg

Out-of-bounds write in VMware Workstation

Priority LOW 34

VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00393 Published 2017-11-17 Fixed in 12.5.8, 4.6.1 CWE-787
TI-2017-03045 CVE-2017-4913 · GHSA-8fxx-v4g8-vr7h

Integer overflow in VMware Workstation

Priority LOW 34

VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulnerability in the True Type Font parser in the TPView.dll.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00389 Published 2017-06-08 Fixed in 12.5.3, 4.4.0 CWE-190
TI-2017-03044 CVE-2017-4912 · GHSA-4cr9-chr7-w4pj

Out-of-bounds read in VMware Workstation

Priority LOW 34

VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in TrueType Font (TTF) parser in the TPView.dll.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00369 Published 2017-06-08 Fixed in 12.5.3, 4.4.0 CWE-125
TI-2017-03043 CVE-2017-4911 · GHSA-rx5v-pch7-54c3

Out-of-bounds write in VMware Workstation

Priority LOW 34

VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds write vulnerabilities in JPEG2000 parser in the TPView.dll.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00369 Published 2017-06-08 Fixed in 12.5.3, 4.4.0 CWE-787
TI-2017-03042 CVE-2017-4910 · GHSA-35rh-6mjx-86f8

Out-of-bounds read in VMware Workstation

Priority LOW 34

VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser in the TPView.dll.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00369 Published 2017-06-08 Fixed in 12.5.3, 4.4.0 CWE-125
TI-2017-03041 CVE-2017-4909 · GHSA-hh4q-82vf-6xhx

Memory corruption in VMware Workstation

Priority LOW 34

VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in TrueType Font (TTF) parser in the TPView.dll.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00369 Published 2017-06-08 Fixed in 12.5.3, 4.4.0 CWE-119
TI-2017-03040 CVE-2017-4908 · GHSA-9p4h-5gqr-3c46

Memory corruption in VMware Workstation

Priority LOW 34

VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities in JPEG2000 parser in the TPView.dll.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00369 Published 2017-06-08 Fixed in 12.5.3, 4.4.0 CWE-119
Priority LOW 32

VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01758 Published 2018-08-13 No fix listed CWE-125
TI-2017-03079 CVE-2017-4948 · GHSA-2436-v72x-5q8x

Out-of-bounds read in VMware Workstation

Priority LOW 31

VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in TPView.dll.

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00409 Published 2018-01-05 Fixed in 14.1.0, 4.7.0 CWE-125
Open these records in search →