Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

131 records

Vendor: VMware Component: Fusion Clear all filters
TI-2026-30218 CVE-2026-41702 · GHSA-gwg2-qh78-562m

TOCTOU local privilege escalation vulnerability

Priority LOW 35

VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00169 Published 2026-05-15 Fixed in 2026H1 CWE-367
TI-2025-16137 CVE-2025-22226 · GHSA-37f6-vjg7-8c6c

Out-of-bounds read in ESXi

Priority CRITICAL 88KEV

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.01633 Published 2025-03-04 Fixed in ESXi80U3d-24585383, ESXi80U2d-24585300 +3 CWE-125
TI-2024-26038 CVE-2024-38811 · GHSA-j6v2-m8w2-27f8

Code-execution in Fusion

Priority MEDIUM 40

VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment variable.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0028 Published 2024-09-03 Fixed in 13.6 CWE-20
TI-2024-14860 CVE-2024-22273 · GHSA-9mq7-wpm3-gv26

Out-of-bounds read in VMware ESXi

Priority LOW 36

The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00165 Published 2024-05-21 Fixed in ESXi80U2sb-23305545, ESXi70U3sq-23794019 +3 CWE-125
TI-2024-14857 CVE-2024-22270 · GHSA-455v-w5mm-7hf6

Information disclosure in VMware Workstation

Priority LOW 32

VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.0052 Published 2024-05-14 Fixed in 17.5.2, 13.5.2 CWE-200
TI-2024-14856 CVE-2024-22269 · GHSA-fv84-h83r-2rc5

Information disclosure in VMware Workstation

Priority LOW 32

VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.0052 Published 2024-05-14 Fixed in 17.5.2, 13.5.2 CWE-200
TI-2024-14855 CVE-2024-22268 · GHSA-9g97-rgrc-9vhg

Out-of-bounds write in VMware Workstation

Priority LOW 32

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00477 Published 2024-05-14 Fixed in 17.5.2 CWE-787
TI-2024-14854 CVE-2024-22267 · GHSA-mcxh-3pw2-4rmg

Use after free in NA VMware Workstation

Priority MEDIUM 43

VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00704 Published 2024-05-14 Fixed in 17.5.2, 13.5.2 CWE-416
TI-2024-14843 CVE-2024-22255 · GHSA-3hfr-246f-6fxv

Information disclosure in VMware ESXi

Priority LOW 36

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.02311 Published 2024-03-05 Fixed in ESXi80U2sb-23305545, ESXi80U1d-23299997 +3 CWE-770
TI-2024-14841 CVE-2024-22253 · GHSA-57rg-p28x-x2f6

Use-after-free in VMware ESXi

Priority MEDIUM 43

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00645 Published 2024-03-05 Fixed in ESXi80U2sb-23305545, ESXi80U1d-23299997 +3 CWE-416
TI-2024-14840 CVE-2024-22252 · GHSA-4xp8-3mc6-r83c

Use-after-free in VMware ESXi

Priority MEDIUM 48

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.03542 Published 2024-03-05 Fixed in ESXi80U2sb-23305545, ESXi80U1d-23299997 +3 CWE-416
TI-2024-14839 CVE-2024-22251 · GHSA-ch34-vwch-58hx

Out-of-bounds read in VMware Workstation

Priority LOW 26

VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device).

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00226 Published 2024-02-27 Fixed in 17.5.1, 13.5.1 CWE-125
TI-2023-16911 CVE-2023-34045 · GHSA-gqww-mmf9-7x23

VMware Fusion installer local privilege escalation

Priority LOW 35

VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg' volume)…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2023-10-20 Fixed in 13.5 CWE-269
TI-2023-16912 CVE-2023-34046 · GHSA-vrpg-hfmh-2gwf

VMware Fusion TOCTOU local privilege escalation vulnerability

Priority LOW 32

VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg'…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0013 Published 2023-10-20 Fixed in 13.5 CWE-367
TI-2023-16910 CVE-2023-34044 · GHSA-mj48-4fj3-6fjg

Information disclosure vulnerability in bluetooth device-sharing functionality

Priority LOW 31

VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00197 Published 2023-10-20 Fixed in 17.5, 13.5 CWE-125
TI-2023-07290 CVE-2023-20871 · GHSA-gc9f-xmg3-m3pp

Incorrect authorization in VMware Fusion

Priority LOW 36

VMware Fusion contains a local privilege escalation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00384 Published 2023-04-25 No fix listed CWE-863
TI-2023-07289 CVE-2023-20870 · GHSA-96r3-r3f6-cmmr

Out-of-bounds read in VMware Workstation Pro / Player and VMware Fusion

Priority LOW 27

VMware Workstation and Fusion contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00371 Published 2023-04-25 No fix listed CWE-125
TI-2023-07288 CVE-2023-20869 · GHSA-xpqq-583w-8g73

Out-of-bounds write in VMware Workstation Pro / Player and VMware Fusion

Priority MEDIUM 42

VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0202 Published 2023-04-25 No fix listed CWE-787
TI-2021-05086 CVE-2021-22045 · GHSA-vfgr-j794-9c26

Out-of-bounds write in VMware ESXi, VMware Workstation and VMware Fusion

Priority MEDIUM 42

VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04681 Published 2022-01-04 No fix listed CWE-787
TI-2020-03458 CVE-2020-3960 · GHSA-74wg-mhc3-jxp5

Out-of-bounds read in VMware ESXi, Workstation, and Fusion

Priority LOW 36

VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in NVMe functionality.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00282 Published 2021-09-15 No fix listed CWE-125
Load more