CVE-2022-22962: VMware Horizon

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the default shared folder location due to a vulnerable symbolic link. Successful exploitation can result in linking to a root owned file.

Affected products

• VMware Horizon: before 2203 (fixed in 2203)

Published 2022-04-11. Last modified 2026-06-17.