WO
Product
Workstation
On CISA KEVExploited in the wild
217
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 55Medium 42Low 4
Watch
Add Workstation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3982 | 7.7 | Oct 20 | VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an… Affected: 15.0 through 15.5.6 |
| CVE-2019-5542 | 7.7 | Nov 20 | VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the RPC handler Affected: 15.0.0 before 15.5.1 |
| CVE-2019-5540 | 7.7 | Nov 20 | VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability in vmnetdhcp Affected: 15.0.0 before 15.5.1 |
| CVE-2026-41703 | 7.6 | Jul 30 | Out-of-bounds read vulnerability Affected: 25H2 before 26H1 |
| CVE-2020-3967 | 7.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 15.0.0 before 15.5.5 |
| CVE-2020-3966 | 7.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before… Affected: 15.0.0 before 15.5.2 |
| CVE-2018-5511 | 7.2 | Apr 13 | On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP… Affected: 14.1.5 |
| CVE-2024-22255 | 7.1 | Mar 5 | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine… Affected: 17.0.0 before 17.5.1 |
| CVE-2017-4948 | 7.1 | Jan 5 | VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in TPView.dll Affected: 12.0.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.0; +10 more |
| CVE-2017-4950 | 7.0 | Jan 11 | VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled Affected: 12.0 before 12.5.9; 14.0 before 14.1.1 |
| CVE-2017-4949 | 7.0 | Jan 11 | VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled Affected: 12.0 before 12.5.9; 14.0 before 14.1.1 |
| CVE-2019-5517 | 6.8 | Apr 15 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before… Affected: 14.0.0 before 14.1.6; 15.0.0 before 15.0.3 |
| CVE-2019-5516 | 6.8 | Apr 15 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before… Affected: 14.0.0 before 14.1.6; 15.0.0 before 15.0.3 |
| CVE-2019-5519 | 6.8 | Apr 1 | VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before… Affected: 14.0.0 before 14.1.7; 15.0.0 before 15.0.4 |
| CVE-2019-5518 | 6.8 | Apr 1 | VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before… Affected: 14.0.0 before 14.1.7; 15.0.0 before 15.0.4 |
| CVE-2024-22253 | 6.7 | Mar 5 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine… Affected: 17.0.0 before 17.5.1 |
| CVE-2024-22252 | 6.7 | Mar 5 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine… Affected: 17.0.0 before 17.5.1 |
| CVE-2021-22041 | 6.7 | Feb 16 | VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller Affected: 16.0.0 before 16.2.1 |
| CVE-2024-22268 | 6.5 | May 14 | VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with… Affected: 17.0.0 before 17.5.2 |
| CVE-2022-22938 | 6.5 | Jan 28 | VMware Workstation (16.x prior to 16.2.2) and Horizon Client for Windows (5.x prior to 5.5.3) contains a denial-of-service vulnerability in the Cortado ThinPrint component Affected: 16.0.0 before 16.2.2 |
| CVE-2021-21989 | 6.5 | May 24 | VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC… Affected: 16.0.0 before 16.1.2 |
| CVE-2021-21988 | 6.5 | May 24 | VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (JPEG2000… Affected: 16.0.0 before 16.1.2 |
| CVE-2021-21987 | 6.5 | May 24 | VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC… Affected: 16.0.0 before 16.1.2 |
| CVE-2020-3999 | 6.5 | Dec 21 | VMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x prior to 15.5.7), VMware Fusion (12.x prior to 12.0 and 11.x prior to 11.5.7) and… Affected: 15.0.0 before 15.5.7 |
| CVE-2019-5536 | 6.5 | Oct 28 | VMware ESXi (6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG), Workstation (15.x before 15.5.0) and Fusion (11.x before 11.5.0) contain a denial-of-service… Affected: 15.0.0 before 15.5.0 |
| CVE-2018-6982 | 6.5 | Dec 4 | VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which… Affected: 14.0.0 before 14.1.4; 15.0.0 |
| CVE-2018-6977 | 6.5 | Oct 9 | VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader Affected: 14.0.0 through 14.1.5; 15.0.0 through 15.0.2 |
| CVE-2018-6972 | 6.5 | Jul 25 | VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), Workstation (14.x before… Affected: 14.0 before 14.1.2 |
| CVE-2017-4938 | 6.5 | Nov 17 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability Affected: 12.0.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.1; +6 more |
| CVE-2010-2249 | 6.5 | Jun 30 | Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a… Affected: 6.5.0 before 6.5.5; 7.1 before 7.1.2 |
| CVE-2015-6933 | 6.3 | Jan 9 | The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi… Affected: 11.0; 11.1; 11.1.1 |
| CVE-2026-22722 | 6.1 | Feb 26 | VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash Affected: 17.0 before 25H2u1 |
| CVE-2024-22270 | 6.0 | May 14 | VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality. A malicious actor with local administrative… Affected: 17.0.0 before 17.5.2 |
| CVE-2024-22269 | 6.0 | May 14 | VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine… Affected: 17.0.0 before 17.5.2 |
| CVE-2023-34044 | 6.0 | Oct 20 | VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth… Affected: 17.0.0 before 17.5 |
| CVE-2023-20870 | 6.0 | Apr 25 | VMware Workstation and Fusion contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine Affected: 17.0.0 before 17.0.2 |
| CVE-2026-22715 | 5.9 | Feb 26 | VMware Workstation/Fusion NAT vulnerability Affected: 17.0 before 25H2U1 |
| CVE-2022-22983 | 5.9 | Aug 9 | VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability Affected: 16.0.0 before 16.2.4 |
| CVE-2019-5520 | 5.9 | Apr 15 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before… Affected: 14.0.0 before 14.1.6; 15.0.0 before 15.0.3 |
| CVE-2020-3981 | 5.8 | Oct 20 | VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an… Affected: 15.0.0 through 15.5.6 |
| CVE-2020-3971 | 5.5 | Jun 25 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow… Affected: 15.0.0 before 15.0.2 |
| CVE-2020-3965 | 5.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before… Affected: 15.0.0 before 15.5.2 |
| CVE-2020-3963 | 5.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before… Affected: 15.0.0 before 15.5.2 |
| CVE-2020-3958 | 5.5 | May 29 | VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before 11.5.2) contain a… Affected: 15.0.0 before 15.5.2 |
| CVE-2018-6963 | 5.5 | May 22 | VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the… Affected: 14.0 before 14.1.2 |
| CVE-2017-4945 | 5.5 | Jan 5 | VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability Affected: 12.0.0; 12.0.1; 12.1; 12.1.1; 12.5; 12.5.0; +10 more |
| CVE-2017-4925 | 5.5 | Sep 15 | VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3),… Affected: 12.0.0 before 12.5.3 |
| CVE-2020-3995 | 5.3 | Oct 20 | In VMware ESXi (6.7 before ESXi670-201908101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x before 15.1.0), Fusion (11.x before 11.1.0), the VMCI host drivers used by… Affected: 15.0.0 before 15.1.0 |
| CVE-2026-22716 | 5.0 | Feb 27 | VMware Workstation out-of-bounds write vulnerability Affected: 25H2 before 25H2U1 |
| CVE-2020-3964 | 4.7 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before… Affected: 15.0.0 before 15.5.2 |