vulnerability
VMware Horizon Client: CVE-2019-5543 VMware Horizon Client, VMRC and Workstation privilege escalation vulnerability (VMSA-2020-0004)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | Mar 16, 2020 | May 25, 2022 | Aug 11, 2025 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Mar 16, 2020
Added
May 25, 2022
Modified
Aug 11, 2025
Description
For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstation for Windows (15.x before 15.5.2) the folder containing configuration files for the VMware USB arbitration service was found to be writable by all users. A local user on the system where the software is installed may exploit this issue to run commands as any user.
Solution
vmware-horizon-client-upgrade-5_3_0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.