FU
Product
Fusion
On CISA KEVExploited in the wild
132
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 52Medium 39Low 2
Watch
Add Fusion to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-22255 | 7.1 | Mar 5 | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine… Affected: 13.0.0 before 13.5.1 |
| CVE-2026-41702 | 7.0 | May 15 | TOCTOU local privilege escalation vulnerability Affected: 2025H2 before 2026H1 |
| CVE-2023-34046 | 7.0 | Oct 20 | VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during installation for the first time (the user needs to drag or copy… Affected: 13.0.0 before 13.5 |
| CVE-2020-3957 | 7.0 | May 29 | VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation… Affected: 11.0.0 before 11.5.5 |
| CVE-2017-4950 | 7.0 | Jan 11 | VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled Affected: 8.0 before 8.5.10; 10.0 before 10.1.1 |
| CVE-2017-4949 | 7.0 | Jan 11 | VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled Affected: 8.0 before 8.5.10; 10.0 before 10.1.1 |
| CVE-2019-5517 | 6.8 | Apr 15 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before… Affected: 10.0.0 before 10.1.6; 11.0.0 before 11.0.3 |
| CVE-2019-5516 | 6.8 | Apr 15 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before… Affected: 10.0.0 before 10.1.6; 11.0.0 before 11.0.3 |
| CVE-2019-5519 | 6.8 | Apr 1 | VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before… Affected: 10.0.0 before 10.1.6; 11.0.0 before 11.0.3 |
| CVE-2019-5518 | 6.8 | Apr 1 | VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before… Affected: 10.0.0 before 10.1.6; 11.0.0 before 11.0.3 |
| CVE-2024-22253 | 6.7 | Mar 5 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine… Affected: 13.0.0 before 13.5.1 |
| CVE-2024-22252 | 6.7 | Mar 5 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine… Affected: 13.0.0 before 13.5.1 |
| CVE-2021-22041 | 6.7 | Feb 16 | VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller Affected: 12.0.0 before 12.2.1 |
| CVE-2021-22040 | 6.7 | Feb 16 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller Affected: 12.0.0 before 12.2.1 |
| CVE-2020-3980 | 6.7 | Sep 16 | VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path Affected: 11.0.0 before 12.0.0 |
| CVE-2024-22268 | 6.5 | May 14 | VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with… Affected: 13.0.0 before 13.5.2 |
| CVE-2020-3999 | 6.5 | Dec 21 | VMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x prior to 15.5.7), VMware Fusion (12.x prior to 12.0 and 11.x prior to 11.5.7) and… Affected: 11.5.0 before 11.5.7 |
| CVE-2019-5536 | 6.5 | Oct 28 | VMware ESXi (6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG), Workstation (15.x before 15.5.0) and Fusion (11.x before 11.5.0) contain a denial-of-service… Affected: 11.0.0 before 11.5.0 |
| CVE-2018-6982 | 6.5 | Dec 4 | VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which… Affected: 10.0.0 before 10.1.4; 11.0.0 |
| CVE-2018-6977 | 6.5 | Oct 9 | VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader Affected: 10.0.0 through 10.1.5; 11.0.0 through 11.0.2 |
| CVE-2018-6972 | 6.5 | Jul 25 | VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), Workstation (14.x before… Affected: 10.0 before 10.1.2 |
| CVE-2017-4938 | 6.5 | Nov 17 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability Affected: 8.0.0; 8.0.1; 8.0.2; 8.1.0; 8.1.1; 8.5.0; +8 more |
| CVE-2015-6933 | 6.3 | Jan 9 | The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi… Affected: 7.0; 7.1; 7.1.1 |
| CVE-2024-22270 | 6.0 | May 14 | VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality. A malicious actor with local administrative… Affected: 13.0.0 before 13.5.2 |
| CVE-2024-22269 | 6.0 | May 14 | VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine… Affected: 13.0.0 before 13.5.2 |
| CVE-2023-34044 | 6.0 | Oct 20 | VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth… Affected: 13.0.0 before 13.5 |
| CVE-2023-20870 | 6.0 | Apr 25 | VMware Workstation and Fusion contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine Affected: 13.0.0 before 13.0.2 |
| CVE-2026-22715 | 5.9 | Feb 26 | VMware Workstation/Fusion NAT vulnerability Affected: 13.0 before 25H2U1 |
| CVE-2019-5520 | 5.9 | Apr 15 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before… Affected: 10.0.0 before 10.1.6; 11.0.0 before 11.0.3 |
| CVE-2020-3981 | 5.8 | Oct 20 | VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an… Affected: 11.0 before 11.5.6 |
| CVE-2020-3971 | 5.5 | Jun 25 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow… Affected: 11.0.0 before 11.0.2 |
| CVE-2020-3965 | 5.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before… Affected: 11.0.0 before 11.5.2 |
| CVE-2020-3963 | 5.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before… Affected: 11.0.0 before 11.5.2 |
| CVE-2020-3958 | 5.5 | May 29 | VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before 11.5.2) contain a… Affected: 11.0.0 before 11.5.2 |
| CVE-2018-6963 | 5.5 | May 22 | VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the… Affected: 10.0 before 10.1.2 |
| CVE-2017-4945 | 5.5 | Jan 5 | VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability Affected: 8.0; 8.0.1; 8.0.2; 8.1; 8.1.1; 8.5; +14 more |
| CVE-2017-4925 | 5.5 | Sep 15 | VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3),… Affected: 8.0.0 before 8.5.4 |
| CVE-2017-4905 | 5.5 | Jun 7 | VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch… Affected: 8.0.0 before 8.5.6 |
| CVE-2016-5329 | 5.5 | Dec 29 | VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection… Affected: 8.0.0; 8.0.1; 8.0.2; 8.1.0; 8.1.1 |
| CVE-2020-3995 | 5.3 | Oct 20 | In VMware ESXi (6.7 before ESXi670-201908101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x before 15.1.0), Fusion (11.x before 11.1.0), the VMCI host drivers used by… Affected: 11.0.0 before 11.1.0 |
| CVE-2018-6957 | 5.3 | Mar 15 | VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of… Affected: 8.0; 8.0.1; 8.0.2; 8.1; 8.1.1; 8.5; +9 more |
| CVE-2020-3964 | 4.7 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before… Affected: 11.0.0 before 11.5.2 |
| CVE-2019-5535 | 4.7 | Oct 10 | VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets Affected: 11.0.0 before 11.5.0 |
| CVE-2024-22251 | 4.4 | Feb 29 | VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administrative privileges on a… Affected: 13.0.0 before 13.5.1 |
| CVE-2020-3970 | 3.8 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 11.0.0 before 11.5.5 |
| CVE-2020-3959 | 3.3 | May 29 | VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1.0) contain a memory… Affected: 11.0.0 before 11.1.0 |
| CVE-2015-2341 | – | Jun 13 | VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +4 more |
| CVE-2015-2340 | – | Jun 13 | TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1,… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +2 more |
| CVE-2015-2339 | – | Jun 13 | TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1,… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +2 more |
| CVE-2015-2338 | – | Jun 13 | TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1,… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +2 more |