vmware horizon client

Name: vmware horizon client
Brand: vmware

productUS

cpe:2.3:a:vmware:horizon_client:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

critical

by severity

0critical7high16medium2low

updated 2026-10-28

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-3950US	high7.8OT critical	7.25% (94th)	KEV	5.4.0	2020-03-17	5.0.0 → 5.4.0
CVE-2018-6970US	medium6.5	1.76% (78th)	—	4.8.1	2018-08-13	4.0.0 → 4.8.1
CVE-2020-3998US	medium6.5	1.28% (70th)	—	5.5.0	2020-10-23	5.0.0 → 5.5.0
CVE-2015-2337US	medium5.8	0.75% (55th)	—	no fix	2015-06-13	2 versions
CVE-2015-2336US	medium5.8	0.75% (55th)	—	no fix	2015-06-13	2 versions
CVE-2015-2340US	medium6.1	0.66% (51st)	—	no fix	2015-06-13	2 versions
CVE-2015-2339US	medium6.1	0.66% (51st)	—	no fix	2015-06-13	2 versions
CVE-2015-2338US	medium6.1	0.66% (51st)	—	no fix	2015-06-13	2 versions
CVE-2021-21987US	medium6.5	0.56% (46th)	—	5.5.2	2021-05-24	5.0.0 → 5.5.2
CVE-2023-34038US	medium5.3	0.49% (42nd)	—	no fix	2023-08-04	8 versions
CVE-2023-34037US	medium5.3	0.46% (40th)	—	no fix	2023-08-04	8 versions
CVE-2021-21989US	medium6.5	0.45% (39th)	—	5.5.2	2021-05-24	5.0.0 → 5.5.2
CVE-2021-21988US	medium6.5	0.45% (39th)	—	5.5.2	2021-05-24	5.0.0 → 5.5.2
CVE-2019-5543US	high7.8	0.39% (33rd)	—	5.3.0	2020-03-16	5.0.0 → 5.3.0
CVE-2020-3961US	high7.8	0.39% (33rd)	—	5.4.3	2020-06-15	< 5.4.3
CVE-2018-6964US	high7.8OT elevated	0.38% (31st)	—	4.8.0	2018-05-29	4.0.0 → 4.8.0
CVE-2020-3974US	high7.8	0.37% (31st)	—	5.4.3	2020-07-10	5.0.0 → 5.4.3
CVE-2020-3991US	high7.1	0.34% (28th)	—	5.5.0	2020-10-16	5.0.0 → 5.5.0
CVE-2020-3990US	medium6.5	0.32% (25th)	—	5.4.4	2020-09-16	5.0.0 → 5.4.4
CVE-2020-3988US	medium6.1	0.30% (23rd)	—	5.4.4	2020-09-16	5.0.0 → 5.4.4
CVE-2020-3987US	medium6.1	0.30% (23rd)	—	5.4.4	2020-09-16	5.0.0 → 5.4.4
CVE-2020-3986US	medium6.1	0.30% (23rd)	—	5.4.4	2020-09-16	5.0.0 → 5.4.4
CVE-2020-3989US	low3.3	0.29% (21st)	—	5.4.4	2020-09-16	5.0.0 → 5.4.4
CVE-2020-3951US	low3.8	0.27% (20th)	—	5.4.0	2020-03-17	5.0.0 → 5.4.0
CVE-2020-3957US	high7.0	0.22% (12th)	—	no fix	2020-05-29	≤ 5.4.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read8 CVEs
CWE-399CWE-3995 CVEs
CWE-269Improper Privilege Management4 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan