Workstation Player vulnerabilities | LiveThreat CVE Feed

Product

Workstation Player

by Vmware · last CVE Feb 16, 2022

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities26 In the news0 Timeline

Severity mix

Critical 0High 15Medium 10Low 1

Severity

All severities26 Critical0 High15 Medium10 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Workstation Player to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-4904	8.8	0%	Jun 7	The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without… Affected: 12.0.0 before 12.5.5
CVE-2017-4903	8.8	0%	Jun 7	VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch… Affected: 12.0.0 before 12.5.5
CVE-2017-4902	8.8	1%	Jun 7	VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to… Affected: 12.0.0 before 12.5.5
CVE-2017-4898	8.8	0%	Jun 7	VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local… Affected: 12.0.0; 12.0.1; 12.1.0; 12.5.0; 12.5.1; 12.5.2
CVE-2016-7461	8.8	1%	Dec 29	The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before… Affected: 12.0.0; 12.0.1; 12.1.0; 12.1.1; 12.5.0; 12.5.1
CVE-2017-4915	7.8	5%	May 22	VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files Affected: 12.0.0
CVE-2016-7086	7.8	0%	Dec 29	The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse… Affected: 12.0.0; 12.0.1; 12.1.0; 12.1.1
CVE-2016-7085	7.8	0%	Dec 29	Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to… Affected: 12.0.0; 12.0.1; 12.1.0; 12.1.1
CVE-2016-7084	7.8	2%	Dec 29	tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows… Affected: 12.0.0; 12.0.1; 12.1.0; 12.1.1
CVE-2016-7083	7.8	1%	Dec 29	VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to… Affected: 12.0.0; 12.0.1; 12.1.0; 12.1.1
CVE-2016-7082	7.8	0%	Dec 29	VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to… Affected: 12.0.0; 12.0.1; 12.1.0; 12.1.1
CVE-2016-7081	7.8	1%	Dec 29	Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual… Affected: 12.0.0; 12.0.1; 12.1.0; 12.1.1
CVE-2016-5330	7.8	18%	Aug 8	Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1,… Affected: 12.1.0 before 12.1.1
CVE-2020-3982	7.7	1%	Oct 20	VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an… Affected: 15.0 through 15.5.6
CVE-2018-5511	7.2	14%	Apr 13	On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP… Affected: 15.0.2
CVE-2021-22040	6.7	1%	Feb 16	VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller Affected: 16.0.0 before 16.2.1
CVE-2020-3990	6.5	0%	Sep 16	VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint… Affected: 15.0.0 before 16.0.0
CVE-2017-4916	6.5	5%	May 22	VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver Affected: 12.0.0
CVE-2020-3988	6.1	0%	Sep 16	VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser) Affected: 15.0.0 before 16.0.0
CVE-2020-3987	6.1	0%	Sep 16	VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser) Affected: 15.0.0 before 16.0.0
CVE-2020-3986	6.1	0%	Sep 16	VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser) Affected: 15.0.0 before 16.0.0
CVE-2017-4905	5.5	1%	Jun 7	VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch… Affected: 12.0.0 before 12.5.5
CVE-2017-4900	5.5	0%	Jun 7	VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver Affected: 12.0.0; 12.0.1; 12.1.0; 12.5.0; 12.5.1; 12.5.2
CVE-2018-6957	5.3	2%	Mar 15	VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of… Affected: 14.0 before 14.1.1; 12.0; 12.0.1; 12.1; 12.1.1; 12.5; +7 more
CVE-2017-4899	4.7	0%	Jun 7	VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver Affected: 12.0.0; 12.0.1; 12.1.0; 12.5.0; 12.5.1
CVE-2020-3989	3.3	0%	Sep 16	VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint… Affected: 15.0.0 before 16.0.0