Known vulnerabilities in VMware Horizon Client 2309.8.11.0.22660930.37 on Thin OS 2402
Vendor:
VMware, Inc
Software:
VMware Horizon Client
Version:
2309.8.11.0.22660930.37 on Thin OS 2402
Software CPE:
cpe:2.3:a:vmware:vmware_horizon_client:*:*:*:*:*:*:*:*
Website:
https://www.vmware.com
Total vulnerabilities:
141
Public exploits:
9
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
3.2.1
3.4.0
2312.1.8.12.1.5 on Thin OS 2405
2309.8.11.0.22660930.37 on Thin OS 2402
2312
2309
2306
2303
2212
2209
2206
2111
2203
5.5.3
5.5
2106
5.5.1
5.5.2
2103
2012
5.5.0
5.4.4
2006
5.4.2
5.4.1
5.4.3
5.4
5.3
5.2
5.1
5.0
4.10
4.9
4.8
4.7
4.6
4.5
4.4
4.3
4.2
4.1
3.0.0
4.0.0
4.1.0
4.2.0
4.3.0
4.4.0
4.5.0
4.6.0
4.7.0
4.8.0
4.9.0
4.10.0
5.0.0
5.1.0
5.2.0
Vulnerabilities (141)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU73828 - State Issues CVE-2023-27535 |
CWE-371 | Low | 2312.1.8.12.1.5 on Thin OS 2405 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 84 more |
||
| #VU73826 - Improper input validation CVE-2023-27533 |
CWE-20 | Low | 2312.1.8.12.1.5 on Thin OS 2405 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 42 more |
||
| #VU72337 - Allocation of Resources Without Limits or Throttling CVE-2023-23916 |
CWE-770 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 16.02.2023 |
SB2023021668 SB2023021670 SB2023021671 and 89 more |
||
| #VU72336 - Cleartext Transmission of Sensitive Information CVE-2023-23915 |
CWE-319 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 16.02.2023 |
SB2023021668 SB2023021671 SB2023021672 and 26 more |
||
| #VU72335 - Cleartext Transmission of Sensitive Information CVE-2023-23914 |
CWE-319 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 16.02.2023 |
SB2023021668 SB2023021671 SB2023021672 and 29 more |
||
| #VU70457 - Security Features CVE-2022-43551 |
CWE-254 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 21.12.2022 |
SB2022122102 SB2022122620 SB2023010612 and 32 more |
||
| #VU70456 - Use After Free CVE-2022-43552 |
CWE-416 | Low | 2312.1.8.12.1.5 on Thin OS 2405 | 21.12.2022 |
SB2022122102 SB2022122620 SB2022122621 and 66 more |
||
| #VU68749 - Cleartext Transmission of Sensitive Information CVE-2022-42916 |
CWE-319 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102703 and 27 more |
||
| #VU68748 - Double Free CVE-2022-42915 |
CWE-415 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102705 and 26 more |
||
| #VU68746 - Expected Behavior Violation CVE-2022-32221 |
CWE-440 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 26.10.2022 |
SB2022102624 SB2022102643 SB2022102644 and 58 more |
||
| #VU66881 - Improper input validation CVE-2022-35252 |
CWE-20 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 31.08.2022 |
SB2022083106 SB2022090108 SB2022090217 and 55 more |
||
| #VU64685 - Improper Verification of Cryptographic Signature CVE-2022-32208 |
CWE-347 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 73 more |
||
| #VU64684 - Incorrect Default Permissions CVE-2022-32207 |
CWE-276 | Low | 2312.1.8.12.1.5 on Thin OS 2405 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 35 more |
||
| #VU64682 - Resource exhaustion CVE-2022-32206 |
CWE-400 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 80 more |
||
| #VU64681 - Resource exhaustion CVE-2022-32205 |
CWE-400 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 32 more |
||
| #VU63009 - Incorrect Implementation of Authentication Algorithm CVE-2022-27782 |
CWE-303 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 11.05.2022 |
SB2022051112 SB2022051136 SB2022051170 and 68 more |
||
| #VU63008 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-27781 |
CWE-835 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 11.05.2022 |
SB2022051112 SB2022051136 SB2022051170 and 36 more |
||
| #VU62644 - Exposure of sensitive information to an unauthorized actor CVE-2022-27776 |
CWE-200 | Low | 2312.1.8.12.1.5 on Thin OS 2405 | 27.04.2022 |
SB2022042706 SB2022042803 SB2022042904 and 62 more |
||
| #VU34080 - NULL Pointer Dereference CVE-2020-13632 |
CWE-476 | Low | 2312.1.8.12.1.5 on Thin OS 2405 | 06.08.2020 |
SB2020080601 SB2020080704 SB2020072756 and 21 more |
||
| #VU27023 - Improper input validation CVE-2020-11655 |
CWE-20 | Medium | 2312.1.8.12.1.5 on Thin OS 2405 | 20.04.2020 |
SB2020042007 SB2020042008 SB2020080704 and 10 more |
Showing elements 1 - 20 out of 141