VMware Remote Console vulnerabilities

6 CVEs affecting VMware Remote Console, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-21999, published 2021-06-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3950: VMware Multiple Products Privilege Escalation Vulnerability, published 2020-03-17. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 7.3% chance of exploitation in the next 30 days. VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability…
CVE-2021-21999, published 2021-06-23. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain a local privilege…
CVE-2019-5543, published 2020-03-16. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstation for Windows (15.x before 15.5.2) the folder containing…
CVE-2020-3974, published 2020-07-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior before 5.4.3) contain a privilege escalation vulnerability…
CVE-2019-5527, published 2019-10-10. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity…
CVE-2020-3957, published 2020-05-29. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a…