Vulnerability · Published Apr 16, 2025 · Assigned by Omnissa
CVE-2025-25230
High 7.8
In plain English
A high-severity privilege mismanagement in Omnissa Horizon Client for Windows from Omnissa. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 95.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Client for Windows is installed may be able to elevate privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Omnissa | Omnissa Horizon Client for Windows | Omnissa Horizon Client for Windows 2412 or earlier |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H