vulnerability
VMware Workstation: VMware Horizon Client, VMRC and Workstation privilege escalation vulnerability (VMSA-2020-0004) (CVE-2019-5543)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | Mar 25, 2020 | Mar 25, 2020 | Aug 11, 2025 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Mar 25, 2020
Added
Mar 25, 2020
Modified
Aug 11, 2025
Description
For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstation for Windows (15.x before 15.5.2) the folder containing configuration files for the VMware USB arbitration service was found to be writable by all users. A local user on the system where the software is installed may exploit this issue to run commands as any user.
Solution
vmware-workstation-upgrade-15_5_2
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.