PT-2020-3953

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 15.x Horizon Client for Windows versions 5.x before 5.4.4 Description: The issue is related to an out-of-bounds read in the Cortado ThinPrint component's EMF Parser. A malicious actor with normal access to a virtua...

PT-2020-3952

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 15.x Horizon Client for Windows versions 5.x before 5.4.4 Description: The issue is related to an out-of-bounds read in the Cortado ThinPrint component's EMR STRETCHDIBITS parser, which can be exploited by a remote...

VMSA-2020-0020:VMware Workstation, Fusion and Horizon Client updates address multiple security vulnerabilities

Advisory ID: VMSA-2020-0020.1 CVSSv3 Range: 3.8-6.7 Issue Date:2020-09-14 Updated On: 2020-11-19 CVEs: CVE-2020-3980, CVE-2020-3986, CVE-2020-3987, CVE-2020-3988, CVE-2020-3989, CVE-2020-3990 Synopsis: VMware Workstation, Fusion and Horizon Client updates address multiple security vulnerabilities...

The vulnerability of the client of the VMware Horizon Client, VMware Remote Console, and VMware Workstation virtualization systems for Windows operating systems stems from the improper assignment of permissions to files, allowing an attacker to execute arbitrary code.

The vulnerability of VMware Horizon Client, a virtualization client for workstations, as well as VMware Remote Console and VMware Workstation, when running on Windows operating systems, is related to the improper assignment of permissions to files. Exploiting this vulnerability can allow an...

The vulnerability in the virtualization system of VMware Horizon Client, VMware Remote Console, and VMware Fusion allows a malicious individual to elevate their privileges to the root level.

The vulnerability of the virtualization system for VMware Horizon Client, VMware Remote Console, and VMware Fusion relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

CVE-2020-3974

VMware Fusion 11.x before 11.5.5, VMware Remote Console for Mac 11.x and prior before 11.2.0 and Horizon Client for Mac 5.x and prior before 5.4.3 contain a privilege escalation vulnerability due to improper XPC Client validation. Successful exploitation of this issue may allow attackers with...

CVE-2020-3974

CVE-2020-3974 affects VMware Fusion 11.x (pre-11.5.5), VMware Remote Console for Mac 11.x (pre-11.2.0), and Horizon Client for Mac 5.x (pre-5.4.3). It is a local privilege-escalation due to improper XPC Client validation, allowing a normal-privilege user to gain root access. Exploitation requires...

VMware Releases Security Updates for Multiple Products

VMware has released security updates to address a vulnerability in VMware Fusion, Remote Console, and Horizon Client. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators t...

CVE-2020-3974: Undefined Security Weakness

VMware Fusion 11.x before 11.5.5, VMware Remote Console for Mac 11.x and prior before 11.2.0 and Horizon Client for Mac 5.x and prior before 5.4.3 contain a privilege escalation vulnerability due to improper XPC Client validation. Successful exploitation of this issue may allow attackers with...

PT-2020-4110

Name of the Vulnerable Software and Affected Versions: VMware Fusion versions 11.x before 11.5.5 VMware Remote Console for Mac versions 11.x and prior before 11.2.0 Horizon Client for Mac versions 5.x and prior before 5.4.3 Description: The issue is related to improper XPC Client validation, whic...

VMSA-2020-0017:VMware Fusion, VMware Remote Console and Horizon Client updates address a privilege escalation vulnerability

Advisory ID: VMSA-2020-0017 CVSSv3 Range: 7.8 Issue Date:2020-07-09 Updated On: 2020-07-09 Initial Advisory CVEs: CVE-2020-3974 Synopsis: VMware Fusion, VMware Remote Console and Horizon Client updates address a privilege escalation vulnerability CVE-2020-3974 RSS Feed Download PDF Download Text...

CVE-2020-3961

VMware Horizon Client for Windows prior to 5.4.3 contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. A local user on the system where the software is installed may exploit this issue to run commands as any user...

CVE-2020-3961

VMware Horizon Client for Windows prior to 5.4.3 contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. A local user on the system where the software is installed may exploit this issue to run commands as any user...

Privilege escalation

VMware Horizon Client for Windows prior to 5.4.3 contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. A local user on the system where the software is installed may exploit this issue to run commands as any user...

CVE-2020-3961

CVE-2020-3961 affects VMware Horizon Client for Windows (before 5.4.3). The root cause is a privilege-escalation flaw caused by folder permission configuration and unsafe loading of libraries, enabling a local user to execute commands with higher privileges. Multiple sources confirm the vulnerabl...

CVE-2020-3961: Incorrect Permission Assignment for Critical Resource

VMware Horizon Client for Windows prior to 5.4.3 contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. A local user on the system where the software is installed may exploit this issue to run commands as any user...

VMware Horizon Client Elevation of Privilege Vulnerability

VMware Horizon Client is a client application for connecting to VMware Horizon virtual desktops from VMware. An elevation of privilege vulnerability exists in VMware Horizon Client 5.x and earlier versions for Windows-based platforms, which can be exploited by a local attacker to run commands as ...

VMware Releases Security Update for Horizon Client for Windows

VMware has released a security update to address a vulnerability in Horizon Client for Windows. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review VMware Securi...

The vulnerability of VMware Fusion, Horizon Client for Mac, and VMware Remote Console for Mac lies in the insecure management of privileges, allowing an attacker to elevate their privileges to the root level.

The vulnerability of VMware Fusion, Horizon Client for Mac, and VMware Remote Console for Mac is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

PT-2020-17818

Name of the Vulnerable Software and Affected Versions VMware Horizon Client for Windows versions prior to 5.4.3 Description The issue is due to folder permission configuration and unsafe loading of libraries, allowing a local user on the system where the software is installed to exploit this and...