CVE-2020-3998

6.5 mediumEPSS 1.3%

Medium (6.5) in vmware horizon client. EPSS 1.3% chance of exploitation in the next 30 days.

VMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure vulnerability. A malicious attacker with local privileges on the machine where Horizon Client for Windows is installed may be able to retrieve hashed credentials if the client crashes.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
Published: 2020-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:horizon_client

References

https://www.vmware.com/security/advisories/VMSA-2020-0024.html
https://www.vmware.com/security/advisories/VMSA-2020-0024.html

Check your stack JSON