WO
Product
Workstation
On CISA KEVExploited in the wild
217
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 55Medium 42Low 4
Watch
Add Workstation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-22224 In wildKEV | 8.2 | Mar 4 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability Affected: 17.x before 17.6.3 |
| CVE-2025-22226 In wildKEV | 6.0 | Mar 4 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Affected: 17.0 before 17.6.3 |
| CVE-2017-4901 | 9.9 | Jun 8 | The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability Affected: 12.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +2 more |
| CVE-2016-2077 | 9.8 | May 18 | VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges… Affected: 11.0; 11.1; 11.1.1; 11.1.2 |
| CVE-2010-1205 | 9.8 | Jun 30 | Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG… Affected: 6.5.0 before 6.5.5; 7.1 before 7.1.2 |
| CVE-2019-5521 | 9.6 | Sep 20 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x… Affected: 14.0.0 before 14.1.6; 15.0.0 before 15.0.3 |
| CVE-2019-5541 | 9.1 | Nov 20 | VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an out-of-bounds write vulnerability in the e1000e virtual network adapter Affected: 15.0.0 before 15.5.1 |
| CVE-2023-20872 | 8.8 | Apr 25 | VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation Affected: 17.0.0 |
| CVE-2020-3947 | 8.8 | Mar 16 | VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp Affected: 15.0.0 before 15.5.2 |
| CVE-2019-5527 | 8.8 | Oct 10 | ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device Affected: 15.0.0 before 15.5.0 |
| CVE-2019-5525 | 8.8 | Jun 6 | VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend Affected: 15.0.0 before 15.1.0 |
| CVE-2019-5512 | 8.8 | Apr 9 | VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately Affected: 14.0.0 before 14.1.6; 15.0.0 before 15.0.3 |
| CVE-2019-5511 | 8.8 | Apr 9 | VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately Affected: 14.0.0 before 14.1.6; 15.0.0 before 15.0.3 |
| CVE-2019-5524 | 8.8 | Apr 2 | VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual network adapter Affected: 14.0.0 before 14.1.6 |
| CVE-2019-5515 | 8.8 | Apr 2 | VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bounds write vulnerability in the e1000… Affected: 14.0.0 before 14.1.6; 15.0.0 before 15.0.3 |
| CVE-2018-6981 | 8.8 | Dec 4 | VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware… Affected: 14.0.0 before 14.1.4; 15.0.0 |
| CVE-2018-6983 | 8.8 | Nov 27 | VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer overflow vulnerability in the virtual… Affected: 14.0.0 before 14.1.5; 15.0.0 before 15.0.2 |
| CVE-2018-6974 | 8.8 | Oct 16 | VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before… Affected: 14.0 before 14.1.3 |
| CVE-2018-6973 | 8.8 | Aug 15 | VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device Affected: 14.x before 14.1.3 |
| CVE-2017-4941 | 8.8 | Dec 20 | VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow… Affected: 12.0.0 before 12.5.8 |
| CVE-2017-4934 | 8.8 | Nov 17 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device Affected: 12.0.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +6 more |
| CVE-2019-5098 | 8.6 | Dec 5 | An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010 Affected: 15.0.0 |
| CVE-2023-20854 | 8.4 | Feb 3 | VMware Workstation contains an arbitrary file deletion vulnerability Affected: 17.0 |
| CVE-2020-3960 | 8.4 | Sep 15 | VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read… Affected: 15.0.0 before 15.5.5 |
| CVE-2024-22267 | 8.2 | May 14 | VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may… Affected: 17.0.0 before 17.5.2 |
| CVE-2023-20869 | 8.2 | Apr 25 | VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the… Affected: 17.0.0 before 17.0.2 |
| CVE-2022-31705 | 8.2 | Dec 14 | VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI) Affected: 16.0.0 before 16.2.5 |
| CVE-2020-4004 | 8.2 | Nov 20 | VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstation (15.x before 15.5.7), Fusion (11.x before 11.5.7)… Affected: 15.0.0 before 15.5.7 |
| CVE-2020-3968 | 8.2 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 15.0.0 before 15.5.5 |
| CVE-2020-3962 | 8.2 | Jun 24 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 15.0.0 before 15.5.5 |
| CVE-2018-6967 | 8.1 | Jul 9 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader… Affected: 14.0 before 14.1.2 |
| CVE-2018-6966 | 8.1 | Jul 9 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader… Affected: 14.0 before 14.1.2 |
| CVE-2018-6965 | 8.1 | Jul 9 | VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader… Affected: 14.0 before 14.1.2 |
| CVE-2024-22273 | 7.8 | May 21 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage… Affected: 17.0.0 before 17.5.1 |
| CVE-2021-22045 | 7.8 | Jan 4 | VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow… Affected: 16.0.0 before 16.2.0 |
| CVE-2020-3969 | 7.8 | Jun 24 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 15.0.0 before 15.5.5 |
| CVE-2020-3948 | 7.8 | Mar 16 | Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vulnerability due to improper file… Affected: 15.0.0 before 15.5.2 |
| CVE-2019-5543 | 7.8 | Mar 16 | For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstation for Windows (15.x before 15.5.2) the… Affected: 15.0.0 before 15.5.2 |
| CVE-2019-5539 | 7.8 | Dec 23 | VMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4) contain a DLL hijacking vulnerability due to insecure loading of… Affected: 15.0.0 before 15.5.1 |
| CVE-2019-5526 | 7.8 | May 15 | VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application Affected: 15.0.0 before 15.1.0 |
| CVE-2017-4939 | 7.8 | Nov 17 | VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly Affected: 12.0.0; 12.0.1; 12.1.1; 12.5.0; 12.5.1; 12.5.2; +5 more |
| CVE-2017-4937 | 7.8 | Nov 17 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll Affected: 12.0.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +6 more |
| CVE-2017-4936 | 7.8 | Nov 17 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll Affected: 12.0.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +6 more |
| CVE-2017-4935 | 7.8 | Nov 17 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll Affected: 12.0.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +6 more |
| CVE-2017-4913 | 7.8 | Jun 8 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulnerability in the True Type Font parser in the TPView.dll Affected: 12.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +1 more |
| CVE-2017-4912 | 7.8 | Jun 8 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in TrueType Font (TTF) parser in the… Affected: 12.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +1 more |
| CVE-2017-4911 | 7.8 | Jun 8 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds write vulnerabilities in JPEG2000 parser in the TPView.dll Affected: 12.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +1 more |
| CVE-2017-4910 | 7.8 | Jun 8 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser in the TPView.dll Affected: 12.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +1 more |
| CVE-2017-4909 | 7.8 | Jun 8 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in TrueType Font (TTF) parser in the TPView.dll Affected: 12.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +1 more |
| CVE-2017-4908 | 7.8 | Jun 8 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities in JPEG2000 parser in the TPView.dll Affected: 12.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +1 more |