CVE-2017-4918

9.8 criticalEPSS 4.9%

VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client is installed.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.9% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2017-06-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:horizon_view

References

http://www.securityfocus.com/bid/98984
http://www.securitytracker.com/id/1038642
https://www.vmware.com/security/advisories/VMSA-2017-0011.html
http://www.securityfocus.com/bid/98984
http://www.securitytracker.com/id/1038642

Check your stack JSON