Priority MEDIUM 52
Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.19491 · Published 2016-08-08 · No fix listed CWE-426
Priority MEDIUM 47
On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allo…
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.14212 · Published 2018-04-13 · No fix listed CWE-470
Priority MEDIUM 42
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.05413 · Published 2017-05-22 · No fix listed CWE-863
Priority LOW 39
VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00518 · Published 2017-06-07 · Fixed in 12.5.5, 8.5.6 CWE-119
Priority LOW 39
The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitr…
CVSS 3.0HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00564 · Published 2016-12-29 · No fix listed CWE-119
Priority LOW 38
The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00427 · Published 2017-06-07 · Fixed in 12.5.5, 8.5.6 CWE-119
Priority LOW 38
VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.0041 · Published 2017-06-07 · Fixed in 12.5.5, 8.5.6 CWE-119
Priority LOW 38
VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable.
CVSS 3.0HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2017-06-07 · No fix listed
Priority LOW 37
VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.04952 · Published 2017-05-22 · No fix listed CWE-476
Priority LOW 37
tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01522 · Published 2016-12-29 · No fix listed CWE-119
Priority LOW 37
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01496 · Published 2016-12-29 · No fix listed CWE-119
Priority LOW 35
VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an out-of-bounds write vulnerability due to a ti…
CVSS 3.1HIGH 7.7· Network · High privileges · No interaction · EPSS 0.00835 · Published 2020-10-20 · No fix listed CWE-367
Priority LOW 35
Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to e…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00519 · Published 2016-12-29 · No fix listed CWE-119
Priority LOW 34
The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directo…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00341 · Published 2016-12-29 · No fix listed CWE-264
Priority LOW 34
Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL i…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00418 · Published 2016-12-29 · No fix listed CWE-426
Priority LOW 34
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00384 · Published 2016-12-29 · No fix listed CWE-119
Priority LOW 31
VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00725 · Published 2022-02-16 · No fix listed CWE-416
Priority LOW 29
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00324 · Published 2020-09-16 · No fix listed CWE-125
Priority LOW 27
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser).
CVSS 3.1MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00301 · Published 2020-09-16 · No fix listed CWE-125
Priority LOW 27
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser).
CVSS 3.1MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00301 · Published 2020-09-16 · No fix listed CWE-125
Priority LOW 27
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser).
CVSS 3.1MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00301 · Published 2020-09-16 · No fix listed CWE-125
Priority LOW 27
VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions.
CVSS 3.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0159 · Published 2018-03-15 · Fixed in 14.1.1, 10.1.1 CWE-772
Priority LOW 27
VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG;…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01204 · Published 2017-06-07 · Fixed in 12.5.5, 8.5.6 CWE-908
Priority LOW 25
VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00338 · Published 2017-06-07 · No fix listed CWE-476
Priority LOW 21
VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver.
CVSS 3.0MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2017-06-07 · No fix listed CWE-125
Load more