Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:vmware_workstation_and_horizon_client_for_windows:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductVmware Workstation And Horizon Client For Windows (f70c5fcb-412e-567b-a954-4a3b6850bb9b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-3990 vulnerable 2026-06-08 05:25:58.581359 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.
Published: 2020-09-16T16:17:17.000Z
Updated: 2024-08-04T07:52:20.351Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3989 vulnerable 2026-06-08 05:25:58.580891 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to create a partial denial-of-service condition on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.
Published: 2020-09-16T16:17:11.000Z
Updated: 2024-08-04T07:52:20.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3988 vulnerable 2026-06-08 05:25:58.580457 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
Published: 2020-09-16T16:14:08.000Z
Updated: 2024-08-04T07:52:20.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3987 vulnerable 2026-06-08 05:25:58.579970 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
Published: 2020-09-16T16:14:01.000Z
Updated: 2024-08-04T07:52:20.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3986 vulnerable 2026-06-08 05:25:58.574525 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
Published: 2020-09-16T16:13:54.000Z
Updated: 2024-08-04T07:52:20.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3951 vulnerable 2026-06-08 05:25:57.964629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.