VMware Workstation güvenlik açıkları (CVE)

VMware Workstation için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

33 sonuç
7.6Yüksek
CVE-2026-41703

Out-of-bounds read vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware ESX; VMware Workstation

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condit…

2.7Düşük
CVE-2026-22717

VMware Workstation out-of-bound read vulnerability

VMware Workstation

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed.

5.9Orta
CVE-2026-22715

VMware Workstation/Fusion NAT vulnerability

VMware Workstation; VMware Fusion

VMWare Workstation and Fusion contain a logic flaw in the management of network packets.  Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's.  Re…

7.1Yüksek
CVE-2025-41239

vSockets information-disclosure vulnerability

VMware ESXi; VMware Cloud Foundation; VMware Workstation; VMware Fusion

VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit thi…

3.2%EPSS
9.3Kritik
CVE-2025-41238

PVSCSI heap-overflow vulnerability

VMware ESXi; VMware Cloud Foundation; VMware Workstation; VMware Fusion

VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI) controller that leads to an out of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue…

9.3Kritik
CVE-2025-41237

VMCI integer-underflow vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware ESXi; VMware Workstation

VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI (Virtual Machine Communication Interface) that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to exe…

9.3Kritik
CVE-2025-41236

VMXNET3 integer-overflow vulnerability

VMware ESXi; VMware Cloud Foundation; VMware Workstation; VMware Fusion

VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to e…

2.6%EPSS
5.5Orta
CVE-2025-41227

Denial-of-Service Vulnerability

VMware ESXi; VMware Cloud Foundation; VMware Telco Cloud Platform; VMware Telco Cloud Infrastructure

VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the hos…

7.1Yüksek
CVE-2025-22226 KEV

VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

ESXi; VMware Workstation; VMware Fusion; VMware Cloud Foundation

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.

1.6%EPSS
9.3Kritik
CVE-2025-22224 KEV

VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

VMware ESXi; VMware Workstation; VMware VMware Cloud Foundation; VMware Telco Cloud Platform

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual mac…

1.6%EPSS
8.1Yüksek
CVE-2024-22273
VMware ESXi; VMware Workstation; VMware Fusion; VMware Cloud Foundation (ESXi)

The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or …

Puansız
CVE-2020-3971
VMware VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow vulnerability in the vmxnet3 virtual network adapter. A malicious actor with local acc…

Puansız
CVE-2020-3965
VMware VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the XHCI USB controller. A malicious actor…

Puansız
CVE-2020-3964
VMware VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the EHCI USB controller. A malicious actor…

Puansız
CVE-2020-3963
VMware VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a use-after-free vulnerability in PVNVRAM. A malicious actor with…

Puansız
CVE-2020-3966
VMware VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a heap-overflow due to a race condition issue in the USB 2.0 cont…

Puansız
CVE-2020-3968
VMware VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds write vulnerability in the USB 3.0 controller (x…

Puansız
CVE-2020-3967
VMware VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a heap-overflow vulnerability in the USB 2.0 controller (EHCI). A…

Puansız
CVE-2020-3970
VMware VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in the Shader functionality. …

Puansız
CVE-2020-3962
VMware VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a use-after-free vulnerability in the SVGA device. A malicious ac…

Puansız
CVE-2020-3969
VMware VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an off-by-one heap-overflow vulnerability in the SVGA device. A m…

Puansız
CVE-2019-5517
VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain multiple out-of-bounds read vulnerabilities in the shader trans…

1.1%EPSS
Puansız
CVE-2019-5520
VMware ESXi; VMware Workstation; VMware Fusion

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) updates address an out-of-bounds read vulnerability. Exploitation of th…

1.0%EPSS