vulnerability
VMware Horizon Client: CVE-2017-4918 Horizon View Client command injection vulnerability (VMSA-2017-0011)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | Jun 8, 2017 | May 25, 2022 | Aug 11, 2025 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Jun 8, 2017
Added
May 25, 2022
Modified
Aug 11, 2025
Description
VMware Horizon View Client contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client is installed.
Solution
vmware-horizon-client-upgrade-4_5_0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.