Horizon Client vulnerabilities | LiveThreat CVE Feed

Product

Horizon Client

by Vmware · last CVE Aug 4, 2023

On CISA KEVExploited in the wild

CVEs

On KEV

7.8

Max CVSS

New 30D

Vulnerabilities25 In the news0 Timeline

Severity mix

Critical 0High 7Medium 11Low 2

Severity

All severities25 Critical0 High7 Medium11 Low2

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Horizon Client to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-21989	6.5	0%	May 24	VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC… Affected: 5.0.0 before 5.5.2
CVE-2021-21988	6.5	0%	May 24	VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (JPEG2000… Affected: 5.0.0 before 5.5.2
CVE-2021-21987	6.5	1%	May 24	VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC… Affected: 5.0.0 before 5.5.2
CVE-2020-3998	6.5	1%	Oct 23	VMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure vulnerability Affected: 5.0.0 before 5.5.0
CVE-2020-3990	6.5	0%	Sep 16	VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint… Affected: 5.0.0 before 5.4.4
CVE-2018-6970	6.5	2%	Aug 13	VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message… Affected: 4.0.0 before 4.8.1
CVE-2020-3988	6.1	0%	Sep 16	VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser) Affected: 5.0.0 before 5.4.4
CVE-2020-3987	6.1	0%	Sep 16	VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser) Affected: 5.0.0 before 5.4.4
CVE-2020-3986	6.1	0%	Sep 16	VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser) Affected: 5.0.0 before 5.4.4
CVE-2023-34038	5.3	0%	Aug 4	VMware Horizon Server contains an information disclosure vulnerability Affected: 2006; 2012; 2103; 2106; 2111; 2111.1; +2 more
CVE-2023-34037	5.3	0%	Aug 4	VMware Horizon Server contains a HTTP request smuggling vulnerability Affected: 2006; 2012; 2103; 2106; 2111; 2111.1; +2 more