What is CVE-2024-11467?

CVE-2024-11467 is a high-severity vulnerability in Omnissa Horizon Client For macOS, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2025-02-04.

How severe is CVE-2024-11467?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2024-11467 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Privilege escalation in Omnissa Horizon Client For macOS

CVE-2024-11467

Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw. Successful exploitation of this issue may allow attackers with user privileges to escalate their privileges to root on the system where the Horizon Client for macOS is installed.

Vulnerability class: Privilege Escalation

EPSS: 0.002 (8.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Omnissa Horizon Client For Macos — versions Omnissa Horizon Client for macOS 2406 or earlier

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

Public proof-of-concept exploits

null-event/CVE-2024-11467

References

Frequently asked questions

What is CVE-2024-11467?: CVE-2024-11467 is a high-severity vulnerability in Omnissa Horizon Client For macOS, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2025-02-04.
How severe is CVE-2024-11467?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2024-11467 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.