TI-2018-05085 Aliases CVE-2018-6963 GHSA-68fh-262x-p9gv

NULL pointer dereference in VMware Workstation

LOW 25CWE-476Published 2018-05-22 · Updated 2024-09-16

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-476.

Summary

VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine trigger a denial-of-Service of their guest machine.

Why it matters now

EPSS 0.00389 33rd percentileScored 2026-11-07

Fix Fixed Workstation (VMware): 14.1.2Fusion (VMware): 10.1.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
VMware	Workstation	14 to before 14.1.2	14.1.2	Patch available	CNA
VMware	Fusion	10 to before 10.1.2	10.1.2	Patch available	CNA

Workstation VendorVMware Affected 14 to before 14.1.2 Fixed in 14.1.2 Patch available CNA
Fusion VendorVMware Affected 10 to before 10.1.2 Fixed in 10.1.2 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:vmware:fusion::::::::	10.0 to before 10.1.2	Vulnerable	VMware
cpe:2.3:a:vmware:workstation::::::::	14.0 to before 14.1.2	Vulnerable	VMware

cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* Versions 10.0 to before 10.1.2 Vulnerable ·VMware
cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* Versions 14.0 to before 14.1.2 Vulnerable ·VMware

Remediation

Fix · CNA Workstation (VMware) Fixed in 14.1.2
Fix · CNA Fusion (VMware) Fixed in 10.1.2

Timeline

2026-10-02 Threatist record created from CVE-2018-6963
2026-10-03 Alias added: GHSA-68fh-262x-p9gv

References

Patch 1

https://www.vmware.com/security/advisories/VMSA-2018-0013.html

TI-2020-03448 Improper privilege management in VMware Fusion, VMware Remote Console for Mac and Horizon… KEVCVSS 3.1HIGH 7.8
TI-2025-16137 Out-of-bounds read in ESXi KEVCVSS 3.1HIGH 7.1
TI-2017-03716 Observable discrepancy in Intel Most Modern Operating Systems CVSS 3.1MEDIUM 5.6
TI-2017-03034 Memory corruption in VMware Workstation Pro/Player CVSS 3.0CRITICAL 9.9
TI-2016-04622 Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware… CVSS 3.1HIGH 7.8
TI-2011-03420 Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5… CVSS 2.0HIGH 9.3

See all 130 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences