Read the docs

VMware

Records1182All Threatist records
Exploited (KEV)41In CISA KEV
CVSS critical188CVSS 9.0–10.0
CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

26 records in Workstation Player · all components

Priority MEDIUM 47

On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allo…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.14212 Published 2018-04-13 No fix listed CWE-470
Priority MEDIUM 42

VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.05413 Published 2017-05-22 No fix listed CWE-863
TI-2017-03035 CVE-2017-4902 · GHSA-59f9-6w7x-46fv

Memory corruption in VMware ESXi

Priority LOW 39

VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00518 Published 2017-06-07 Fixed in 12.5.5, 8.5.6 CWE-119
Priority LOW 39

The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitr…

CVSS 3.0HIGH 8.8 Local Low privileges No interaction EPSS 0.00564 Published 2016-12-29 No fix listed CWE-119
TI-2017-03037 CVE-2017-4904 · GHSA-3xjq-fcxw-8c8v

Memory corruption in VMware ESXi

Priority LOW 38

The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00427 Published 2017-06-07 Fixed in 12.5.5, 8.5.6 CWE-119
TI-2017-03036 CVE-2017-4903 · GHSA-9q76-gqr4-73cm

Memory corruption in VMware ESXi

Priority LOW 38

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0041 Published 2017-06-07 Fixed in 12.5.5, 8.5.6 CWE-119
Priority LOW 37

VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04952 Published 2017-05-22 No fix listed CWE-476
Priority LOW 37

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01496 Published 2016-12-29 No fix listed CWE-119
Priority LOW 35

VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an out-of-bounds write vulnerability due to a ti…

CVSS 3.1HIGH 7.7 Network High privileges No interaction EPSS 0.00835 Published 2020-10-20 No fix listed CWE-367
Priority LOW 35

Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to e…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00519 Published 2016-12-29 No fix listed CWE-119
Priority LOW 34

The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directo…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00341 Published 2016-12-29 No fix listed CWE-264
Priority LOW 34

Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL i…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00418 Published 2016-12-29 No fix listed CWE-426
Priority LOW 34

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00384 Published 2016-12-29 No fix listed CWE-119
Priority LOW 29

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00324 Published 2020-09-16 No fix listed CWE-125
Priority LOW 27

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser).

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00301 Published 2020-09-16 No fix listed CWE-125
Priority LOW 27

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser).

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00301 Published 2020-09-16 No fix listed CWE-125
Priority LOW 27

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser).

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00301 Published 2020-09-16 No fix listed CWE-125
Priority LOW 27

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG;…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01204 Published 2017-06-07 Fixed in 12.5.5, 8.5.6 CWE-908
Priority LOW 25

VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00338 Published 2017-06-07 No fix listed CWE-476
Priority LOW 21

VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver.

CVSS 3.0MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00294 Published 2017-06-07 No fix listed CWE-125
Load more
Open these records in search →