Read the docs

VMware

Records1182All Threatist records
Exploited (KEV)41In CISA KEV
CVSS critical188CVSS 9.0–10.0
CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV
TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability Priority HIGH 71KEV 2026-10-28TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery Priority CRITICAL 92KEV 2026-03-09TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability Priority CRITICAL 94KEV 2026-03-03TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Priority CRITICAL 100KEV 2026-01-23TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Priority CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records
Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

131 records in Fusion · all components

TI-2020-03448 CVE-2020-3950 · GHSA-fx3w-hj7j-hfgf

Improper privilege management in VMware Fusion, VMware Remote Console for Mac and Horizon…

Priority CRITICAL 93KEV

VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.07254 Published 2020-03-17 No fix listed CWE-269
TI-2025-16137 CVE-2025-22226 · GHSA-37f6-vjg7-8c6c

Out-of-bounds read in ESXi

Priority CRITICAL 88KEV

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.01633 Published 2025-03-04 Fixed in ESXi80U3d-24585383, ESXi80U2d-24585300 +3 CWE-125
TI-2017-03716 CVE-2017-5753

Observable discrepancy in Intel Most Modern Operating Systems

Priority HIGH 69

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.93838 Published 2018-01-04 Fixed CWE-203
TI-2017-03034 CVE-2017-4901 · GHSA-8xg8-8x73-gmmx

Memory corruption in VMware Workstation Pro/Player

Priority MEDIUM 61

The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability.

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.1994 Published 2017-06-08 Fixed in 12.5.4, 8.5.5. CWE-119
TI-2011-03420 CVE-2011-3868 · GHSA-7jrj-rw38-cw85

Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5…

Priority MEDIUM 49

Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05767 Published 2011-10-07 No fix listed CWE-119
TI-2024-14840 CVE-2024-22252 · GHSA-4xp8-3mc6-r83c

Use-after-free in VMware ESXi

Priority MEDIUM 48

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.03542 Published 2024-03-05 Fixed in ESXi80U2sb-23305545, ESXi80U1d-23299997 +3 CWE-416
TI-2012-02832 CVE-2012-3288 · GHSA-9j82-jjqx-5j4g

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6…

Priority MEDIUM 47

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assist…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03799 Published 2012-06-14 No fix listed CWE-20
TI-2019-03930 CVE-2019-5524 · GHSA-88f2-66g2-2qpg

Out-of-bounds write in VMware Workstation, VMware Fusion

Priority MEDIUM 45

VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual network adapter.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04045 Published 2019-04-02 No fix listed CWE-787
TI-2019-03927 CVE-2019-5521 · GHSA-cphr-3j6j-hwcv

Out-of-bounds read in VMware ESXi

Priority MEDIUM 45

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain an out-of-bounds read…

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01628 Published 2019-09-20 Fixed in 15.0.3, 14.1.6 +2 CWE-125
TI-2019-03921 CVE-2019-5515 · GHSA-ggc8-vp3r-5j38

Out-of-bounds write in VMware Workstation and Fusion

Priority MEDIUM 45

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bounds write vulnerability in the e1000 and e1000e virtual network adapters.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04159 Published 2019-04-02 No fix listed CWE-787
TI-2019-03920 CVE-2019-5514 · GHSA-6vc3-crc6-4w78

Missing authentication in VMware Fusion

Priority MEDIUM 44

VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03484 Published 2019-04-01 Fixed in 11.0.3 CWE-306
TI-2017-03073 CVE-2017-4941 · GHSA-9hmp-hj7f-46vm

Memory corruption in VMware ESXi

Priority MEDIUM 44

VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a st…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03157 Published 2017-12-20 Fixed in 12.5.8, 8.5.9 CWE-119
TI-2017-03065 CVE-2017-4933 · GHSA-6m9x-2xwm-463c

Out-of-bounds write in VMware ESXi

Priority MEDIUM 44

VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a heap overflow via a specific…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03571 Published 2017-12-20 Fixed in 12.5.8, 8.5.9 CWE-787
TI-2012-02168 CVE-2012-2450 · GHSA-pr45-2j7r-cvjx

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x…

Priority MEDIUM 44

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest O…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02464 Published 2012-05-04 No fix listed
TI-2012-02167 CVE-2012-2449 · GHSA-5h58-q44m-q85g

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x…

Priority MEDIUM 44

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02485 Published 2012-05-04 No fix listed CWE-119
TI-2024-14854 CVE-2024-22267 · GHSA-mcxh-3pw2-4rmg

Use after free in NA VMware Workstation

Priority MEDIUM 43

VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00704 Published 2024-05-14 Fixed in 17.5.2, 13.5.2 CWE-416
TI-2024-14841 CVE-2024-22253 · GHSA-57rg-p28x-x2f6

Use-after-free in VMware ESXi

Priority MEDIUM 43

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00645 Published 2024-03-05 Fixed in ESXi80U2sb-23305545, ESXi80U1d-23299997 +3 CWE-416
TI-2010-01100 CVE-2010-1141 · GHSA-q95x-7x5m-676v

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x…

Priority MEDIUM 43

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.03802 Published 2010-04-12 No fix listed CWE-264
TI-2023-07288 CVE-2023-20869 · GHSA-xpqq-583w-8g73

Out-of-bounds write in VMware Workstation Pro / Player and VMware Fusion

Priority MEDIUM 42

VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0202 Published 2023-04-25 No fix listed CWE-787
TI-2021-05086 CVE-2021-22045 · GHSA-vfgr-j794-9c26

Out-of-bounds write in VMware ESXi, VMware Workstation and VMware Fusion

Priority MEDIUM 42

VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04681 Published 2022-01-04 No fix listed CWE-787
TI-2019-03946 CVE-2019-5541 · GHSA-w3wx-jc54-pqp4

Out-of-bounds write in VMware Workstation and Fusion

Priority MEDIUM 42

VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an out-of-bounds write vulnerability in the e1000e virtual network adapter.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01412 Published 2019-11-20 No fix listed CWE-787
TI-2018-05103 CVE-2018-6981 · GHSA-gg2h-7m29-p3rh

Use of uninitialized resource in VMware ESXi, VMware Workstation, and VMware Fusion

Priority MEDIUM 41

VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VM…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01322 Published 2018-12-04 No fix listed CWE-908
TI-2018-05087 CVE-2018-6965 · GHSA-8chp-q824-m353

Out-of-bounds read in VMware ESXi, Workstation, and Fusion

Priority MEDIUM 41

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.02937 Published 2018-07-09 No fix listed CWE-125
Load more
Open these records in search →