Out-of-bounds read vulnerability affects VMware ESXi, Workstation, and Fusion. The vulnerability can be exploited by a local user on the system and them able to run commands as any user. A code injection vulnerability with VMware Cloud Director leads to arbitrary remote code execution. A privilege escalation vulnerability exists with Horizon Client for Windows 5.x and prior, fixed with version 5.4.3, the vulnerability considered as important severity range and CVSSv3 base score of 8.4.”]