Read the docs
TI-2019-03923 Aliases CVE-2019-5517GHSA-f5mm-r2x3-3qmq

Out-of-bounds read in VMware ESXi

Priority LOW 32CWE-125Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain multiple out-of-bounds read vulnerabilities in the shader translator. Exploitation of these issues requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of these issues may lead to information disclosure or may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. The workaround for these issues involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.

Why it matters now

EPSS 0.01107 66th percentileScored 2026-11-07
Fix Fixed Workstation (VMware): 15.0.3, 14.1.6Fusion (VMware): 11.0.3, 10.1.6

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
VMwareESXi6.7 before ESXi670-201904101-SG; 6.5 before ESXi650-201903001—No fix listedCNA
VMwareWorkstation15 to before 15.0.3; 14 to before 14.1.615.0.3, 14.1.6Patch availableCNA
VMwareFusion11 to before 11.0.3; 10 to before 10.1.611.0.3, 10.1.6Patch availableCNA
  • ESXi VendorVMware Affected 6.7 before ESXi670-201904101-SG; 6.5 before ESXi650-201903001 Fixed in — No fix listed CNA
  • Workstation VendorVMware Affected 15 to before 15.0.3; 14 to before 14.1.6 Fixed in 15.0.3, 14.1.6 Patch available CNA
  • Fusion VendorVMware Affected 11 to before 11.0.3; 10 to before 10.1.6 Fixed in 11.0.3, 10.1.6 Patch available CNA

CPE configurations NVD · 118

CPEVersionsRoleVendor
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*10.0.0 to before 10.1.6; 11.0.0 to before 11.0.3VulnerableVMware
cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*14.0.0 to before 14.1.6; 15.0.0 to before 15.0.3VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*6.5VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*6.5 650-201701001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*6.5 650-201703001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*6.5 650-201703002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*6.5 650-201704001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*6.5 650-201707101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*6.5 650-201707102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*6.5 650-201707103VulnerableVMware
  • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* Versions 10.0.0 to before 10.1.6; 11.0.0 to before 11.0.3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* Versions 14.0.0 to before 14.1.6; 15.0.0 to before 15.0.3 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:* Versions 6.5 650-201701001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:* Versions 6.5 650-201703001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:* Versions 6.5 650-201703002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:* Versions 6.5 650-201704001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:* Versions 6.5 650-201707101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:* Versions 6.5 650-201707102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:* Versions 6.5 650-201707103 Vulnerable ·VMware
Show 108 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*6.5 650-201707201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*6.5 650-201707202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*6.5 650-201707203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*6.5 650-201707204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*6.5 650-201707205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*6.5 650-201707206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*6.5 650-201707207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*6.5 650-201707208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*6.5 650-201707209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*6.5 650-201707210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*6.5 650-201707211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*6.5 650-201707212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*6.5 650-201707213VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*6.5 650-201707214VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*6.5 650-201707215VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*6.5 650-201707216VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*6.5 650-201707217VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*6.5 650-201707218VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*6.5 650-201707219VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*6.5 650-201707220VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*6.5 650-201707221VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*6.5 650-201710001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*6.5 650-201712001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:*6.5 650-201803001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:*6.5 650-201806001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201808001:*:*:*:*:*:*6.5 650-201808001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201810001:*:*:*:*:*:*6.5 650-201810001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201810002:*:*:*:*:*:*6.5 650-201810002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:*6.5 650-201811001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201811002:*:*:*:*:*:*6.5 650-201811002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:*6.5 650-201811301VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201901001:*:*:*:*:*:*6.5 650-201901001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:*6.7VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:*6.7 670-201806001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201807001:*:*:*:*:*:*6.7 670-201807001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201808001:*:*:*:*:*:*6.7 670-201808001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810001:*:*:*:*:*:*6.7 670-201810001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:*6.7 670-201810101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:*6.7 670-201810102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:*6.7 670-201810103VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:*6.7 670-201810201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:*6.7 670-201810202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:*6.7 670-201810203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:*6.7 670-201810204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:*6.7 670-201810205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:*6.7 670-201810206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:*6.7 670-201810207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:*6.7 670-201810208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:*6.7 670-201810209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:*6.7 670-201810210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:*6.7 670-201810211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:*6.7 670-201810212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:*6.7 670-201810213VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:*6.7 670-201810214VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:*6.7 670-201810215VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:*6.7 670-201810216VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:*6.7 670-201810217VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:*6.7 670-201810218VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:*6.7 670-201810219VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:*6.7 670-201810220VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:*6.7 670-201810221VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:*6.7 670-201810222VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:*6.7 670-201810223VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:*6.7 670-201810224VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:*6.7 670-201810225VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:*6.7 670-201810226VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:*6.7 670-201810227VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:*6.7 670-201810228VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:*6.7 670-201810229VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:*6.7 670-201810230VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:*6.7 670-201810231VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:*6.7 670-201810232VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:*6.7 670-201810233VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:*6.7 670-201810234VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:*6.7 670-201811001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901001:*:*:*:*:*:*6.7 670-201901001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:*6.7 670-201901401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:*6.7 670-201901402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:*6.7 670-201901403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904201:*:*:*:*:*:*6.7 670-201904201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904202:*:*:*:*:*:*6.7 670-201904202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904203:*:*:*:*:*:*6.7 670-201904203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904204:*:*:*:*:*:*6.7 670-201904204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904205:*:*:*:*:*:*6.7 670-201904205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904206:*:*:*:*:*:*6.7 670-201904206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904207:*:*:*:*:*:*6.7 670-201904207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904208:*:*:*:*:*:*6.7 670-201904208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904209:*:*:*:*:*:*6.7 670-201904209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904210:*:*:*:*:*:*6.7 670-201904210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904211:*:*:*:*:*:*6.7 670-201904211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904212:*:*:*:*:*:*6.7 670-201904212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904213:*:*:*:*:*:*6.7 670-201904213VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904214:*:*:*:*:*:*6.7 670-201904214VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904215:*:*:*:*:*:*6.7 670-201904215VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904216:*:*:*:*:*:*6.7 670-201904216VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904217:*:*:*:*:*:*6.7 670-201904217VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904218:*:*:*:*:*:*6.7 670-201904218VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904219:*:*:*:*:*:*6.7 670-201904219VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904220:*:*:*:*:*:*6.7 670-201904220VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904221:*:*:*:*:*:*6.7 670-201904221VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904222:*:*:*:*:*:*6.7 670-201904222VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904223:*:*:*:*:*:*6.7 670-201904223VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904224:*:*:*:*:*:*6.7 670-201904224VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904225:*:*:*:*:*:*6.7 670-201904225VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904226:*:*:*:*:*:*6.7 670-201904226VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904227:*:*:*:*:*:*6.7 670-201904227VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904228:*:*:*:*:*:*6.7 670-201904228VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904229:*:*:*:*:*:*6.7 670-201904229VulnerableVMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:* Versions 6.5 650-201707201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:* Versions 6.5 650-201707202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:* Versions 6.5 650-201707203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:* Versions 6.5 650-201707204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:* Versions 6.5 650-201707205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:* Versions 6.5 650-201707206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:* Versions 6.5 650-201707207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:* Versions 6.5 650-201707208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:* Versions 6.5 650-201707209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:* Versions 6.5 650-201707210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:* Versions 6.5 650-201707211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:* Versions 6.5 650-201707212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:* Versions 6.5 650-201707213 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:* Versions 6.5 650-201707214 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:* Versions 6.5 650-201707215 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:* Versions 6.5 650-201707216 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:* Versions 6.5 650-201707217 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:* Versions 6.5 650-201707218 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:* Versions 6.5 650-201707219 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:* Versions 6.5 650-201707220 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:* Versions 6.5 650-201707221 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:* Versions 6.5 650-201710001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:* Versions 6.5 650-201712001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:* Versions 6.5 650-201803001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:* Versions 6.5 650-201806001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201808001:*:*:*:*:*:* Versions 6.5 650-201808001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201810001:*:*:*:*:*:* Versions 6.5 650-201810001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201810002:*:*:*:*:*:* Versions 6.5 650-201810002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:* Versions 6.5 650-201811001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201811002:*:*:*:*:*:* Versions 6.5 650-201811002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:* Versions 6.5 650-201811301 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201901001:*:*:*:*:*:* Versions 6.5 650-201901001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:* Versions 6.7 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:* Versions 6.7 670-201806001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201807001:*:*:*:*:*:* Versions 6.7 670-201807001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201808001:*:*:*:*:*:* Versions 6.7 670-201808001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810001:*:*:*:*:*:* Versions 6.7 670-201810001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:* Versions 6.7 670-201810101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:* Versions 6.7 670-201810102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:* Versions 6.7 670-201810103 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:* Versions 6.7 670-201810201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:* Versions 6.7 670-201810202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:* Versions 6.7 670-201810203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:* Versions 6.7 670-201810204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:* Versions 6.7 670-201810205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:* Versions 6.7 670-201810206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:* Versions 6.7 670-201810207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:* Versions 6.7 670-201810208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:* Versions 6.7 670-201810209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:* Versions 6.7 670-201810210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:* Versions 6.7 670-201810211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:* Versions 6.7 670-201810212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:* Versions 6.7 670-201810213 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:* Versions 6.7 670-201810214 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:* Versions 6.7 670-201810215 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:* Versions 6.7 670-201810216 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:* Versions 6.7 670-201810217 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:* Versions 6.7 670-201810218 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:* Versions 6.7 670-201810219 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:* Versions 6.7 670-201810220 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:* Versions 6.7 670-201810221 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:* Versions 6.7 670-201810222 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:* Versions 6.7 670-201810223 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:* Versions 6.7 670-201810224 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:* Versions 6.7 670-201810225 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:* Versions 6.7 670-201810226 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:* Versions 6.7 670-201810227 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:* Versions 6.7 670-201810228 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:* Versions 6.7 670-201810229 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:* Versions 6.7 670-201810230 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:* Versions 6.7 670-201810231 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:* Versions 6.7 670-201810232 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:* Versions 6.7 670-201810233 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:* Versions 6.7 670-201810234 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:* Versions 6.7 670-201811001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901001:*:*:*:*:*:* Versions 6.7 670-201901001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:* Versions 6.7 670-201901401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:* Versions 6.7 670-201901402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:* Versions 6.7 670-201901403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904201:*:*:*:*:*:* Versions 6.7 670-201904201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904202:*:*:*:*:*:* Versions 6.7 670-201904202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904203:*:*:*:*:*:* Versions 6.7 670-201904203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904204:*:*:*:*:*:* Versions 6.7 670-201904204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904205:*:*:*:*:*:* Versions 6.7 670-201904205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904206:*:*:*:*:*:* Versions 6.7 670-201904206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904207:*:*:*:*:*:* Versions 6.7 670-201904207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904208:*:*:*:*:*:* Versions 6.7 670-201904208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904209:*:*:*:*:*:* Versions 6.7 670-201904209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904210:*:*:*:*:*:* Versions 6.7 670-201904210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904211:*:*:*:*:*:* Versions 6.7 670-201904211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904212:*:*:*:*:*:* Versions 6.7 670-201904212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904213:*:*:*:*:*:* Versions 6.7 670-201904213 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904214:*:*:*:*:*:* Versions 6.7 670-201904214 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904215:*:*:*:*:*:* Versions 6.7 670-201904215 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904216:*:*:*:*:*:* Versions 6.7 670-201904216 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904217:*:*:*:*:*:* Versions 6.7 670-201904217 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904218:*:*:*:*:*:* Versions 6.7 670-201904218 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904219:*:*:*:*:*:* Versions 6.7 670-201904219 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904220:*:*:*:*:*:* Versions 6.7 670-201904220 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904221:*:*:*:*:*:* Versions 6.7 670-201904221 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904222:*:*:*:*:*:* Versions 6.7 670-201904222 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904223:*:*:*:*:*:* Versions 6.7 670-201904223 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904224:*:*:*:*:*:* Versions 6.7 670-201904224 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904225:*:*:*:*:*:* Versions 6.7 670-201904225 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904226:*:*:*:*:*:* Versions 6.7 670-201904226 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904227:*:*:*:*:*:* Versions 6.7 670-201904227 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904228:*:*:*:*:*:* Versions 6.7 670-201904228 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904229:*:*:*:*:*:* Versions 6.7 670-201904229 Vulnerable ·VMware

Remediation

  • Fix · CNA Workstation (VMware) Fixed in 15.0.3, 14.1.6
  • Fix · CNA Fusion (VMware) Fixed in 11.0.3, 10.1.6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-5517
  2. 2026-10-03 Alias added: GHSA-f5mm-r2x3-3qmq

References

Patch 1

  • TI-2020-03488 Use after free in VMware ESXi KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-16135 Time-of-check time-of-use race condition in VMware ESXi KEVCVSS 3.1CRITICAL 9.3
  • TI-2025-16136 Out-of-bounds write in VMware ESXi KEVCVSS 3.1HIGH 8.2
  • TI-2010-03709 The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS)… KEVCVSS 3.1HIGH 7.8
  • TI-2024-24615 Authentication bypass in VMware ESXi KEVCVSS 3.1HIGH 7.2
See all 139 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences