CVE-2020-3961: VMware Horizon Client

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. A local user on the system where the software is installed may exploit this issue to run commands as any user.

Affected products

• VMware Horizon Client: before 5.4.3 (fixed in 5.4.3)

Published 2020-06-15. Last modified 2026-06-17.