VMware Horizon View vulnerabilities

14 CVEs affecting VMware Horizon View, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-6970, published 2018-08-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-4918, published 2017-06-08. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged…
CVE-2016-7087, published 2016-12-29. Medium severity, CVSS 5.3. EPSS: 4.4% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Connection Server in VMware Horizon View 5.x before 5.3.7, 6.x before 6.2.3, and 7.x before 7.0.1 allows remote attackers to obtain sensitive information via…
CVE-2017-4907, published 2017-06-08. Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days. VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-overflow vulnerability which may allow a remote…
CVE-2018-6970, published 2018-08-13. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library.…
CVE-2017-4948, published 2018-01-05. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with…
CVE-2017-4937, published 2017-11-17. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this…
CVE-2017-4936, published 2017-11-17. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this…
CVE-2017-4935, published 2017-11-17. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this…
CVE-2017-4913, published 2017-06-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulnerability in the True Type Font parser in the TPView.dll. On Workstation, this…
CVE-2017-4912, published 2017-06-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in TrueType Font (TTF) parser in the TPView.dll. On…

Latest

CVE-2017-4911, published 2017-06-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds write vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this…
CVE-2017-4910, published 2017-06-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this…