Read the docs
TI-2019-03927 Aliases CVE-2019-5521GHSA-cphr-3j6j-hwcv

Out-of-bounds read in VMware ESXi

Priority MEDIUM 45CWE-125Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain an out-of-bounds read vulnerability in the pixel shader functionality. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to create a denial-of-service condition on the host. Exploitation of this issue require an attacker to have access to a virtual machine with 3D graphics enabled. It is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.

Why it matters now

EPSS 0.01628 76th percentileScored 2026-11-07
Fix Fixed VMware Workstation (VMware): 15.0.3, 14.1.6VMware Fusion (VMware): 11.0.3, 10.1.6

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
VMwareVMware ESXi6.7 before ESXi670-201904101-SG; 6.5 before ESXi650-201903001—No fix listedCNA
VMwareVMware Workstation15 to before 15.0.3; 14 to before 14.1.615.0.3, 14.1.6Patch availableCNA
VMwareVMware Fusion11 to before 11.0.3; 10 to before 10.1.611.0.3, 10.1.6Patch availableCNA
  • VMware ESXi VendorVMware Affected 6.7 before ESXi670-201904101-SG; 6.5 before ESXi650-201903001 Fixed in — No fix listed CNA
  • VMware Workstation VendorVMware Affected 15 to before 15.0.3; 14 to before 14.1.6 Fixed in 15.0.3, 14.1.6 Patch available CNA
  • VMware Fusion VendorVMware Affected 11 to before 11.0.3; 10 to before 10.1.6 Fixed in 11.0.3, 10.1.6 Patch available CNA

CPE configurations NVD · 118

CPEVersionsRoleVendor
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*10.0.0 to before 10.1.6; 11.0.0 to before 11.0.3VulnerableVMware
cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*14.0.0 to before 14.1.6; 15.0.0 to before 15.0.3VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*6.5VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*6.5 650-201701001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*6.5 650-201703001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*6.5 650-201703002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*6.5 650-201704001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*6.5 650-201707101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*6.5 650-201707102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*6.5 650-201707103VulnerableVMware
  • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* Versions 10.0.0 to before 10.1.6; 11.0.0 to before 11.0.3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* Versions 14.0.0 to before 14.1.6; 15.0.0 to before 15.0.3 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:* Versions 6.5 650-201701001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:* Versions 6.5 650-201703001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:* Versions 6.5 650-201703002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:* Versions 6.5 650-201704001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:* Versions 6.5 650-201707101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:* Versions 6.5 650-201707102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:* Versions 6.5 650-201707103 Vulnerable ·VMware
Show 108 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*6.5 650-201707201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*6.5 650-201707202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*6.5 650-201707203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*6.5 650-201707204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*6.5 650-201707205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*6.5 650-201707206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*6.5 650-201707207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*6.5 650-201707208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*6.5 650-201707209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*6.5 650-201707210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*6.5 650-201707211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*6.5 650-201707212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*6.5 650-201707213VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*6.5 650-201707214VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*6.5 650-201707215VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*6.5 650-201707216VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*6.5 650-201707217VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*6.5 650-201707218VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*6.5 650-201707219VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*6.5 650-201707220VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*6.5 650-201707221VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*6.5 650-201710001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*6.5 650-201712001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:*6.5 650-201803001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:*6.5 650-201806001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201808001:*:*:*:*:*:*6.5 650-201808001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201810001:*:*:*:*:*:*6.5 650-201810001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201810002:*:*:*:*:*:*6.5 650-201810002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:*6.5 650-201811001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201811002:*:*:*:*:*:*6.5 650-201811002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:*6.5 650-201811301VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201901001:*:*:*:*:*:*6.5 650-201901001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:*6.7VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:*6.7 670-201806001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201807001:*:*:*:*:*:*6.7 670-201807001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201808001:*:*:*:*:*:*6.7 670-201808001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810001:*:*:*:*:*:*6.7 670-201810001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:*6.7 670-201810101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:*6.7 670-201810102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:*6.7 670-201810103VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:*6.7 670-201810201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:*6.7 670-201810202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:*6.7 670-201810203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:*6.7 670-201810204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:*6.7 670-201810205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:*6.7 670-201810206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:*6.7 670-201810207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:*6.7 670-201810208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:*6.7 670-201810209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:*6.7 670-201810210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:*6.7 670-201810211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:*6.7 670-201810212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:*6.7 670-201810213VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:*6.7 670-201810214VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:*6.7 670-201810215VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:*6.7 670-201810216VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:*6.7 670-201810217VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:*6.7 670-201810218VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:*6.7 670-201810219VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:*6.7 670-201810220VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:*6.7 670-201810221VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:*6.7 670-201810222VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:*6.7 670-201810223VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:*6.7 670-201810224VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:*6.7 670-201810225VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:*6.7 670-201810226VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:*6.7 670-201810227VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:*6.7 670-201810228VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:*6.7 670-201810229VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:*6.7 670-201810230VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:*6.7 670-201810231VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:*6.7 670-201810232VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:*6.7 670-201810233VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:*6.7 670-201810234VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:*6.7 670-201811001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901001:*:*:*:*:*:*6.7 670-201901001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:*6.7 670-201901401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:*6.7 670-201901402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:*6.7 670-201901403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904201:*:*:*:*:*:*6.7 670-201904201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904202:*:*:*:*:*:*6.7 670-201904202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904203:*:*:*:*:*:*6.7 670-201904203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904204:*:*:*:*:*:*6.7 670-201904204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904205:*:*:*:*:*:*6.7 670-201904205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904206:*:*:*:*:*:*6.7 670-201904206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904207:*:*:*:*:*:*6.7 670-201904207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904208:*:*:*:*:*:*6.7 670-201904208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904209:*:*:*:*:*:*6.7 670-201904209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904210:*:*:*:*:*:*6.7 670-201904210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904211:*:*:*:*:*:*6.7 670-201904211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904212:*:*:*:*:*:*6.7 670-201904212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904213:*:*:*:*:*:*6.7 670-201904213VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904214:*:*:*:*:*:*6.7 670-201904214VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904215:*:*:*:*:*:*6.7 670-201904215VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904216:*:*:*:*:*:*6.7 670-201904216VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904217:*:*:*:*:*:*6.7 670-201904217VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904218:*:*:*:*:*:*6.7 670-201904218VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904219:*:*:*:*:*:*6.7 670-201904219VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904220:*:*:*:*:*:*6.7 670-201904220VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904221:*:*:*:*:*:*6.7 670-201904221VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904222:*:*:*:*:*:*6.7 670-201904222VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904223:*:*:*:*:*:*6.7 670-201904223VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904224:*:*:*:*:*:*6.7 670-201904224VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904225:*:*:*:*:*:*6.7 670-201904225VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904226:*:*:*:*:*:*6.7 670-201904226VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904227:*:*:*:*:*:*6.7 670-201904227VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904228:*:*:*:*:*:*6.7 670-201904228VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904229:*:*:*:*:*:*6.7 670-201904229VulnerableVMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:* Versions 6.5 650-201707201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:* Versions 6.5 650-201707202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:* Versions 6.5 650-201707203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:* Versions 6.5 650-201707204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:* Versions 6.5 650-201707205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:* Versions 6.5 650-201707206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:* Versions 6.5 650-201707207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:* Versions 6.5 650-201707208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:* Versions 6.5 650-201707209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:* Versions 6.5 650-201707210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:* Versions 6.5 650-201707211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:* Versions 6.5 650-201707212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:* Versions 6.5 650-201707213 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:* Versions 6.5 650-201707214 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:* Versions 6.5 650-201707215 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:* Versions 6.5 650-201707216 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:* Versions 6.5 650-201707217 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:* Versions 6.5 650-201707218 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:* Versions 6.5 650-201707219 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:* Versions 6.5 650-201707220 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:* Versions 6.5 650-201707221 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:* Versions 6.5 650-201710001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:* Versions 6.5 650-201712001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:* Versions 6.5 650-201803001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:* Versions 6.5 650-201806001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201808001:*:*:*:*:*:* Versions 6.5 650-201808001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201810001:*:*:*:*:*:* Versions 6.5 650-201810001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201810002:*:*:*:*:*:* Versions 6.5 650-201810002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:* Versions 6.5 650-201811001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201811002:*:*:*:*:*:* Versions 6.5 650-201811002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:* Versions 6.5 650-201811301 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201901001:*:*:*:*:*:* Versions 6.5 650-201901001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:* Versions 6.7 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:* Versions 6.7 670-201806001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201807001:*:*:*:*:*:* Versions 6.7 670-201807001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201808001:*:*:*:*:*:* Versions 6.7 670-201808001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810001:*:*:*:*:*:* Versions 6.7 670-201810001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:* Versions 6.7 670-201810101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:* Versions 6.7 670-201810102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:* Versions 6.7 670-201810103 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:* Versions 6.7 670-201810201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:* Versions 6.7 670-201810202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:* Versions 6.7 670-201810203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:* Versions 6.7 670-201810204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:* Versions 6.7 670-201810205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:* Versions 6.7 670-201810206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:* Versions 6.7 670-201810207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:* Versions 6.7 670-201810208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:* Versions 6.7 670-201810209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:* Versions 6.7 670-201810210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:* Versions 6.7 670-201810211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:* Versions 6.7 670-201810212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:* Versions 6.7 670-201810213 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:* Versions 6.7 670-201810214 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:* Versions 6.7 670-201810215 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:* Versions 6.7 670-201810216 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:* Versions 6.7 670-201810217 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:* Versions 6.7 670-201810218 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:* Versions 6.7 670-201810219 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:* Versions 6.7 670-201810220 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:* Versions 6.7 670-201810221 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:* Versions 6.7 670-201810222 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:* Versions 6.7 670-201810223 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:* Versions 6.7 670-201810224 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:* Versions 6.7 670-201810225 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:* Versions 6.7 670-201810226 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:* Versions 6.7 670-201810227 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:* Versions 6.7 670-201810228 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:* Versions 6.7 670-201810229 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:* Versions 6.7 670-201810230 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:* Versions 6.7 670-201810231 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:* Versions 6.7 670-201810232 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:* Versions 6.7 670-201810233 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:* Versions 6.7 670-201810234 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:* Versions 6.7 670-201811001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901001:*:*:*:*:*:* Versions 6.7 670-201901001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:* Versions 6.7 670-201901401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:* Versions 6.7 670-201901402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:* Versions 6.7 670-201901403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904201:*:*:*:*:*:* Versions 6.7 670-201904201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904202:*:*:*:*:*:* Versions 6.7 670-201904202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904203:*:*:*:*:*:* Versions 6.7 670-201904203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904204:*:*:*:*:*:* Versions 6.7 670-201904204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904205:*:*:*:*:*:* Versions 6.7 670-201904205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904206:*:*:*:*:*:* Versions 6.7 670-201904206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904207:*:*:*:*:*:* Versions 6.7 670-201904207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904208:*:*:*:*:*:* Versions 6.7 670-201904208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904209:*:*:*:*:*:* Versions 6.7 670-201904209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904210:*:*:*:*:*:* Versions 6.7 670-201904210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904211:*:*:*:*:*:* Versions 6.7 670-201904211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904212:*:*:*:*:*:* Versions 6.7 670-201904212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904213:*:*:*:*:*:* Versions 6.7 670-201904213 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904214:*:*:*:*:*:* Versions 6.7 670-201904214 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904215:*:*:*:*:*:* Versions 6.7 670-201904215 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904216:*:*:*:*:*:* Versions 6.7 670-201904216 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904217:*:*:*:*:*:* Versions 6.7 670-201904217 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904218:*:*:*:*:*:* Versions 6.7 670-201904218 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904219:*:*:*:*:*:* Versions 6.7 670-201904219 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904220:*:*:*:*:*:* Versions 6.7 670-201904220 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904221:*:*:*:*:*:* Versions 6.7 670-201904221 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904222:*:*:*:*:*:* Versions 6.7 670-201904222 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904223:*:*:*:*:*:* Versions 6.7 670-201904223 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904224:*:*:*:*:*:* Versions 6.7 670-201904224 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904225:*:*:*:*:*:* Versions 6.7 670-201904225 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904226:*:*:*:*:*:* Versions 6.7 670-201904226 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904227:*:*:*:*:*:* Versions 6.7 670-201904227 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904228:*:*:*:*:*:* Versions 6.7 670-201904228 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904229:*:*:*:*:*:* Versions 6.7 670-201904229 Vulnerable ·VMware

Remediation

  • Fix · CNA VMware Workstation (VMware) Fixed in 15.0.3, 14.1.6
  • Fix · CNA VMware Fusion (VMware) Fixed in 11.0.3, 10.1.6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-5521
  2. 2026-10-03 Alias added: GHSA-cphr-3j6j-hwcv

References

Advisory 2

  • TI-2020-03488 Use after free in VMware ESXi KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-16135 Time-of-check time-of-use race condition in VMware ESXi KEVCVSS 3.1CRITICAL 9.3
  • TI-2025-16136 Out-of-bounds write in VMware ESXi KEVCVSS 3.1HIGH 8.2
  • TI-2010-03709 The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS)… KEVCVSS 3.1HIGH 7.8
  • TI-2024-24615 Authentication bypass in VMware ESXi KEVCVSS 3.1HIGH 7.2
See all 139 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences