CVE-2022-22938
Medium
Description
VMware Workstation (16.x prior to 16.2.2) and Horizon Client for Windows (5.x prior to 5.5.3) contains a denial-of-service vulnerability in the Cortado ThinPrint component. The issue exists in TrueType font parser. A malicious actor with access to a virtual machine or remote desktop may exploit this issue to trigger a denial-of-service condition in the Thinprint service running on the host machine where VMware Workstation or Horizon Client for Windows is installed.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Vmware Workstation
PublishedJan 28, 2022
First seenJan 28, 2022
How to fix
Update
- vmware workstation16.2.2 or later
- vmware horizon5.5.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware workstation | 16.0.0 ≤ v < 16.2.2 | 16.2.2 |
| vmware horizon | 5.0.0 ≤ v < 5.5.3 | 5.5.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.