Vulnerabilities

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS.

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.

The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability.

VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality.

VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device.

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality.

VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device.

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller.

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller.

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller.

VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device).

VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation.

VMware Workstation and Fusion contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

VMware Workstation contains an arbitrary file deletion vulnerability.

VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI).

VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability.

VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller.

VMware Workstation (16.x prior to 16.2.2) and Horizon Client for Windows (5.x prior to 5.5.3) contains a denial-of-service vulnerability in the Cortado ThinPrint component.

VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation.

VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in NVMe functionality.

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser).

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (JPEG2000 Parser).

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser).