CVE-2022-22938: Medium severity vmware workstation and esxi vulnerability
VMware Workstation (16.x prior to 16.2.2) and Horizon Client for Windows (5.x prior to 5.5.3) contains a denial-of-service vulnerability in the Cortado ThinPrint component. The issue exists in TrueType font parser. A malicious actor with access to a virtual machine or remote desktop may exploit this issue to trigger a denial-of-service condition in the Thinprint service running on the host machine where VMware Workstation or Horizon Client for Windows is installed.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2022-22938.
What software versions are affected by this vulnerability?
VMware Workstation versions prior to 16.2.2 and Horizon Client for Windows versions prior to 5.5.3 are affected.
What is the severity level of CVE-2022-22938?
The severity level is medium with a CVSS score of 6.5.
What is the component that contains the vulnerability?
The vulnerability exists in the Cortado ThinPrint component.
How can this vulnerability be exploited?
A malicious actor with access to a virtual machine or remote desktop may exploit this vulnerability.