GCVE - cpe:2.3:a:vmware:horizon_client:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:horizon_client:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Horizon Client (`6ccb7f1e-cbb4-5553-852b-3aae3fa1f776`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-21989`	vulnerable	2026-06-08 05:29:59.484261	Details available VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed. Published: 2021-05-24T11:43:34.000Z Updated: 2024-08-03T18:30:23.647Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2021-0009.html https://www.zerodayinitiative.com/advisories/ZDI-21-610/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21988`	vulnerable	2026-06-08 05:29:59.483769	Details available VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (JPEG2000 Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed. Published: 2021-05-24T11:35:00.000Z Updated: 2024-08-03T18:30:23.700Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2021-0009.html https://www.zerodayinitiative.com/advisories/ZDI-21-609/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21987`	vulnerable	2026-06-08 05:29:59.483136	Details available VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed. Published: 2021-05-24T11:34:55.000Z Updated: 2024-08-03T18:30:23.576Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2021-0009.html https://www.zerodayinitiative.com/advisories/ZDI-21-608/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3998`	vulnerable	2026-06-08 05:25:58.643907	Details available VMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure vulnerability. A malicious attacker with local privileges on the machine where Horizon Client for Windows is installed may be able to retrieve hashed credentials if the client crashes. Published: 2020-10-23T13:49:50.000Z Updated: 2024-08-04T07:52:20.577Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2020-0024.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3991`	vulnerable	2026-06-08 05:25:58.581843	Details available VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at install time. This will result into a denial-of-service condition on the machine where Horizon Client for Windows is installed. Published: 2020-10-16T13:15:22.000Z Updated: 2024-08-04T07:52:20.583Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2020-0022.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3974`	vulnerable	2026-06-08 05:25:58.453767	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3961`	vulnerable	2026-06-08 05:25:58.177741	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3957`	vulnerable	2026-06-08 05:25:58.093999	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3951`	vulnerable	2026-06-08 05:25:57.964680	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3950`	vulnerable	2026-06-08 05:25:57.962077	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5543`	vulnerable	2026-06-08 05:13:59.784587	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6970`	vulnerable	2026-06-08 05:11:54.548361	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6964`	vulnerable	2026-06-08 05:11:54.533678	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.