CVE-2024-11468

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-04 · updated 2026-06-17
Weakness: CWE-276

Description

Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed.

Affected products

Omnissa Horizon Client for MacOS: through Omnissa Horizon Client for macOS 2406

References

https://static.omnissa.com/sites/default/files/OMSA-2024-0002.pdf
https://www.omnissa.com/omnissa-security-response/

Get alerted when CVE-2024-11468 or the next vulnerability affects your stack