PT-2025-16903

Name of the Vulnerable Software and Affected Versions Omnissa Horizon Client for Windows affected versions not specified Description The issue allows a malicious actor with local access to potentially elevate privileges where Horizon Client for Windows is installed. Recommendations At the moment,...

CVE-2025-25230: Improper Privilege Management

Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Client for Windows is installed may be able to elevate privileges...

CVE-2022-22938: Undefined Security Weakness

VMware Workstation 16.x prior to 16.2.2 and Horizon Client for Windows 5.x prior to 5.5.3 contains a denial-of-service vulnerability in the Cortado ThinPrint component. The issue exists in TrueType font parser. A malicious actor with access to a virtual machine or remote desktop may exploit this...

PT-2022-1543

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 16.x prior to 16.2.2 Horizon Client for Windows versions 5.x prior to 5.5.3 Description The issue exists in the TrueType font parser of the Cortado ThinPrint component. A malicious actor with access to a virtual...

CVE-2021-21989

CVE-2021-21989 affects VMware Workstation 16.x (pre-16.1.2) and Horizon Client for Windows 5.x (pre-5.5.2). The issue is an out-of-bounds read in the Cortado ThinPrint TTC Parser that can lead to information disclosure from the TPView process when an attacker has access to a virtual machine or re...

CVE-2021-21987: Out-of-bounds Read

VMware Workstation 16.x prior to 16.1.2 and Horizon Client for Windows 5.x prior to 5.5.2 contain out-of-bounds read vulnerability in the Cortado ThinPrint component TTC Parser. A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to...

CVE-2021-21989: Out-of-bounds Read

VMware Workstation 16.x prior to 16.1.2 and Horizon Client for Windows 5.x prior to 5.5.2 contain out-of-bounds read vulnerability in the Cortado ThinPrint component TTC Parser. A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to...

CVE-2021-21988: Out-of-bounds Read

VMware Workstation 16.x prior to 16.1.2 and Horizon Client for Windows 5.x prior to 5.5.2 contain out-of-bounds read vulnerability in the Cortado ThinPrint component JPEG2000 Parser. A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading t...

PT-2021-3251

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 16.x prior to 16.1.2 Horizon Client for Windows versions 5.x prior to 5.5.2 Description The issue is related to an out-of-bounds read vulnerability in the Cortado ThinPrint component, specifically the TTC Parser. Th...

PT-2021-3250

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 16.x prior to 16.1.2 Horizon Client for Windows versions 5.x prior to 5.5.2 Description The issue is related to an out-of-bounds read vulnerability in the Cortado ThinPrint component, specifically the JPEG2000 Parse...

PT-2021-3087

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 16.x prior to 16.1.2 Horizon Client for Windows versions 5.x prior to 5.5.2 Description The issue is related to an out-of-bounds read vulnerability in the Cortado ThinPrint component, specifically the TTC Parser. Th...

CVE-2020-3998: Undefined Security Weakness

VMware Horizon Client for Windows 5.x prior to 5.5.0 contains an information disclosure vulnerability. A malicious attacker with local privileges on the machine where Horizon Client for Windows is installed may be able to retrieve hashed credentials if the client crashes...

PT-2020-4715

Name of the Vulnerable Software and Affected Versions: VMware Horizon Client for Windows versions 5.x prior to 5.5.0 Description: The issue is related to insufficient protection of registration data, which may allow a malicious attacker to gain unauthorized access to protected information...

CVE-2020-3991: Undefined Security Weakness

VMware Horizon Client for Windows 5.x before 5.5.0 contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at...

PT-2020-4395

Name of the Vulnerable Software and Affected Versions: VMware Horizon Client for Windows versions 5.x before 5.5.0 Description: The issue is related to a denial-of-service condition due to a file system access control problem during installation. It may allow an attacker to overwrite certain admi...

CVE-2020-3989: Out-of-bounds Write

VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to create a partial...

CVE-2020-3986: Out-of-bounds Read

VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an out-of-bounds read vulnerability in Cortado ThinPrint component EMF Parser. A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service...

CVE-2020-3990: Out-of-bounds Read

VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to leak memory from...

CVE-2020-3988: Out-of-bounds Read

VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an out-of-bounds read vulnerability in Cortado ThinPrint component JPEG2000 parser. A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service...

CVE-2020-3987: Out-of-bounds Read

VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an out-of-bounds read vulnerability in Cortado ThinPrint component EMR STRETCHDIBITS parser. A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial...