FU
Product
Fusion
On CISA KEVExploited in the wild
131
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 52Medium 38Low 2
Watch
Add Fusion to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3950 In wildKEV | 7.8 | Mar 17 | VMware Multiple Products Privilege Escalation Vulnerability Affected: 11.0.0 before 11.5.2 |
| CVE-2025-22226 In wildKEV | 6.0 | Mar 4 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Affected: 13.0.0 before 13.6.3 |
| CVE-2017-4901 | 9.9 | Jun 8 | The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability Affected: 8.0.0; 8.0.1; 8.0.2; 8.1.0; 8.1.1; 8.5.0; +4 more |
| CVE-2019-5521 | 9.6 | Sep 20 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x… Affected: 10.0.0 before 10.1.6; 11.0.0 before 11.0.3 |
| CVE-2019-5541 | 9.1 | Nov 20 | VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an out-of-bounds write vulnerability in the e1000e virtual network adapter Affected: 11.0.0 before 11.5.1 |
| CVE-2023-20872 | 8.8 | Apr 25 | VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation Affected: 13.0.0 |
| CVE-2020-3947 | 8.8 | Mar 16 | VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp Affected: after 11.0.0 before 11.5.2 |
| CVE-2019-5527 | 8.8 | Oct 10 | ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device Affected: 11.0.0 before 11.5.0 |
| CVE-2019-5524 | 8.8 | Apr 2 | VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual network adapter Affected: 10.0.0 before 10.1.6 |
| CVE-2019-5515 | 8.8 | Apr 2 | VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bounds write vulnerability in the e1000… Affected: 10.0.0 before 10.1.6; 11.0.0 before 11.0.3 |
| CVE-2019-5514 | 8.8 | Apr 1 | VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket Affected: 11.0.0 before 11.0.3 |
| CVE-2018-6981 | 8.8 | Dec 4 | VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware… Affected: 10.0.0 before 10.1.4; 11.0.0 |
| CVE-2018-6983 | 8.8 | Nov 27 | VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer overflow vulnerability in the virtual… Affected: 10.0.0 before 10.1.5; 11.0.0 before 11.0.2 |
| CVE-2018-6974 | 8.8 | Oct 16 | VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before… Affected: 10.0 before 10.1.3 |
| CVE-2018-6973 | 8.8 | Aug 15 | VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device Affected: 10.x before 10.1.3 |
| CVE-2017-4941 | 8.8 | Dec 20 | VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow… Affected: 8.0.0 before 8.5.9 |
| CVE-2017-4933 | 8.8 | Dec 20 | VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC… Affected: 8.0.0 before 8.5.9 |
| CVE-2017-4934 | 8.8 | Nov 17 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device Affected: 8.0.0; 8.0.1; 8.0.2; 8.1.0; 8.1.1; 8.5.0; +8 more |
| CVE-2017-4924 | 8.8 | Sep 15 | VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of-bounds write vulnerability in SVGA… Affected: 8.0.0 before 8.5.8 |
| CVE-2017-4904 | 8.8 | Jun 7 | The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without… Affected: 8.0.0 before 8.5.6 |
| CVE-2017-4903 | 8.8 | Jun 7 | VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch… Affected: 8.0.0 before 8.5.6 |
| CVE-2017-4902 | 8.8 | Jun 7 | VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to… Affected: 8.0.0 before 8.5.6 |
| CVE-2016-7461 | 8.8 | Dec 29 | The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before… Affected: 8.0.0; 8.0.1; 8.0.2; 8.1.0; 8.1.1; 8.5.0; +1 more |
| CVE-2020-3960 | 8.4 | Sep 15 | VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read… Affected: 11.0.0 before 11.5.5 |
| CVE-2024-22267 | 8.2 | May 14 | VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may… Affected: 13.0.0 before 13.5.2 |
| CVE-2023-20869 | 8.2 | Apr 25 | VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the… Affected: 13.0.0 before 13.0.2 |
| CVE-2022-31705 | 8.2 | Dec 14 | VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI) Affected: 12.0.0 before 12.2.5 |
| CVE-2020-4004 | 8.2 | Nov 20 | VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstation (15.x before 15.5.7), Fusion (11.x before 11.5.7)… Affected: 11.0 before 11.5.7 |
| CVE-2020-3968 | 8.2 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 11.0.0 before 11.5.5 |
| CVE-2020-3962 | 8.2 | Jun 24 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 11.0.0 before 11.5.5 |
| CVE-2018-6967 | 8.1 | Jul 9 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader… Affected: 10.0 before 10.1.2 |
| CVE-2018-6966 | 8.1 | Jul 9 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader… Affected: 10.0 before 10.1.2 |
| CVE-2018-6965 | 8.1 | Jul 9 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader… Affected: 10.0 before 10.1.2 |
| CVE-2024-38811 | 7.8 | Sep 3 | Code-execution vulnerability Affected: 13.0.0 before 13.6 |
| CVE-2024-22273 | 7.8 | May 21 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage… Affected: 13.0.0 before 13.5.1 |
| CVE-2023-34045 | 7.8 | Oct 20 | VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation for the first time (the user needs to drag or copy the … Affected: 13.0.0 before 13.5 |
| CVE-2023-20871 | 7.8 | Apr 25 | VMware Fusion contains a local privilege escalation vulnerability Affected: 13.0.0 before 13.0.2 |
| CVE-2021-22045 | 7.8 | Jan 4 | VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow… Affected: 12.0.0 before 12.2.0 |
| CVE-2020-3974 | 7.8 | Jul 10 | VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior before 5.4.3) contain a privilege… Affected: 11.0.0 before 11.5.5 |
| CVE-2020-3969 | 7.8 | Jun 24 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 11.0.0 before 11.5.5 |
| CVE-2020-3948 | 7.8 | Mar 16 | Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vulnerability due to improper file… Affected: 11.0.0 before 11.5.2 |
| CVE-2018-6962 | 7.8 | May 22 | VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation Affected: 10.0 before 10.1.2 |
| CVE-2016-5330 | 7.8 | Aug 8 | Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1,… Affected: 8.1 before 8.1.1 |
| CVE-2020-3982 | 7.7 | Oct 20 | VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an… Affected: 11.0 before 11.5.6 |
| CVE-2019-5542 | 7.7 | Nov 20 | VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the RPC handler Affected: 11.0.0 before 11.5.1 |
| CVE-2019-5540 | 7.7 | Nov 20 | VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability in vmnetdhcp Affected: 11.0.0 before 11.5.1 |
| CVE-2026-41703 | 7.6 | Jul 30 | Out-of-bounds read vulnerability Affected: 25H2 before 26H1 |
| CVE-2021-22043 | 7.5 | Feb 16 | VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled Affected: before 4.4 |
| CVE-2020-3967 | 7.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 11.0.0 before 11.5.5 |
| CVE-2020-3966 | 7.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before… Affected: 11.0.0 before 11.5.2 |