Vulnerabilities (CVE)

Filtered by vendor Vmware Subscribe
Filtered by product Horizon
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-22938 2 Microsoft, Vmware 3 Windows, Horizon, Workstation 2022-02-04 2.1 LOW 6.5 MEDIUM
VMware Workstation (16.x prior to 16.2.2) and Horizon Client for Windows (5.x prior to 5.5.3) contains a denial-of-service vulnerability in the Cortado ThinPrint component. The issue exists in TrueType font parser. A malicious actor with access to a virtual machine or remote desktop may exploit this issue to trigger a denial-of-service condition in the Thinprint service running on the host machine where VMware Workstation or Horizon Client for Windows is installed.
CVE-2020-3997 1 Vmware 1 Horizon 2020-10-30 3.5 LOW 5.4 MEDIUM
VMware Horizon Server (7.x prior to 7.10.3 or 7.13.0) contains a Cross Site Scripting (XSS) vulnerability. Successful exploitation of this issue may allow an attacker to inject malicious script which will be executed.
CVE-2019-5513 2 Microsoft, Vmware 2 Windows, Horizon 2020-08-24 5.0 MEDIUM 5.3 MEDIUM
VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclosure vulnerability. Successful exploitation of this issue may allow disclosure of internal domain names, the Connection Server’s internal name, or the gateway’s internal IP address.