WO
Product
Workstation
On CISA KEVExploited in the wild
217
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 55Medium 42Low 4
Watch
Add Workstation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-5535 | 4.7 | Oct 10 | VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets Affected: 15.0.0 before 15.5.0 |
| CVE-2024-22251 | 4.4 | Feb 29 | VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administrative privileges on a… Affected: 17.0 before 17.5.1 |
| CVE-2020-3970 | 3.8 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 15.0.0 before 15.5.5 |
| CVE-2020-3951 | 3.8 | Mar 17 | VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-service vulnerability due to a heap-overflow issue in… Affected: 15.0.0 before 15.5.2 |
| CVE-2020-3959 | 3.3 | May 29 | VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1.0) contain a memory… Affected: 15.0.0 before 15.1.0 |
| CVE-2026-22717 | 2.7 | Feb 27 | VMware Workstation out-of-bound read vulnerability Affected: 25H2 before 25H1U1 |
| CVE-2015-3650 | – | Jul 10 | vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x and 6.x before 6.0.7 and 7.x before 7.1.1, and VMware Horizon Client… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +3 more |
| CVE-2015-2341 | – | Jun 13 | VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4 |
| CVE-2015-2340 | – | Jun 13 | TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +2 more |
| CVE-2015-2339 | – | Jun 13 | TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +2 more |
| CVE-2015-2338 | – | Jun 13 | TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +2 more |
| CVE-2015-2337 | – | Jun 13 | TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +2 more |
| CVE-2015-2336 | – | Jun 13 | TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +2 more |
| CVE-2015-1044 | – | Jan 29 | vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to cause a… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4 |
| CVE-2015-1043 | – | Jan 29 | The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4 |
| CVE-2014-8370 | – | Jan 29 | VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4 |
| CVE-2014-4200 | – | Aug 28 | vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local… Affected: through 10.0.3; 10.0; 10.0.1; 10.0.2 |
| CVE-2014-4199 | – | Aug 28 | vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a… Affected: through 10.0.3; 10.0; 10.0.1; 10.0.2 |
| CVE-2014-3793 | – | May 31 | VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS… Affected: 10.0; 10.0.1 |
| CVE-2014-2384 | – | Apr 15 | vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation… Affected: 10.0.1_build_1379776 |
| CVE-2014-1208 | – | Jan 17 | VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users… Affected: 9.0 |
| CVE-2013-3519 | – | Dec 4 | lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when… Affected: 9.0; 9.0.1; 9.0.2 |
| CVE-2013-5972 | – | Nov 18 | VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via… Affected: 9.0; 9.0.1; 9.0.2 |
| CVE-2013-1662 | – | Aug 24 | vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted… Affected: 8.0; 8.0.0.18997; 8.0.1; 8.0.1.27038; 8.0.2; 8.0.3; +6 more |
| CVE-2013-1406 | – | Feb 11 | The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before… Affected: 8.0; 8.0.0.18997; 8.0.1; 8.0.1.27038; 8.0.2; 8.0.3; +2 more |
| CVE-2012-5459 | – | Nov 14 | Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a… Affected: 8.0; 8.0.0.18997; 8.0.1; 8.0.1.27038; 8.0.2; 8.0.3; +1 more |
| CVE-2012-5458 | – | Nov 14 | VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS… Affected: 8.0; 8.0.0.18997; 8.0.1; 8.0.1.27038; 8.0.2; 8.0.3; +1 more |
| CVE-2012-3569 | – | Nov 14 | Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows… Affected: 8.0; 8.0.0.18997; 8.0.1; 8.0.1.27038; 8.0.2; 8.0.3; +1 more |
| CVE-2012-1666 | – | Sep 8 | Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware… Affected: through 8.0.3; 8.0; 8.0.0.18997; 8.0.1; 8.0.1.27038; 8.0.2 |
| CVE-2012-3289 | – | Jun 14 | VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of… Affected: 8.0; 8.0.1; 8.0.2; 8.0.3 |
| CVE-2012-3288 | – | Jun 14 | VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and… Affected: 7.0; 7.0.1; 7.1; 7.1.1; 7.1.2; 7.1.3; +7 more |
| CVE-2012-2450 | – | May 4 | VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly… Affected: 8.0; 8.0.1; 8.0.2 |
| CVE-2012-2449 | – | May 4 | VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly… Affected: 8.0; 8.0.1; 8.0.2 |
| CVE-2012-1518 | – | Apr 17 | VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect… Affected: 8.0; 8.0.1 |
| CVE-2011-3868 | – | Oct 7 | Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute… Affected: 7.0; 7.0.1; 7.1; 7.1.1; 7.1.2; 7.1.3; +1 more |
| CVE-2011-2146 | – | Jun 6 | mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi… Affected: 7.1.1; 7.1.2; 7.1.3 |
| CVE-2011-2145 | – | Jun 6 | mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi… Affected: 7.1.1; 7.1.2; 7.1.3 |
| CVE-2011-1787 | – | Jun 6 | Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before… Affected: 7.1.1; 7.1.2; 7.1.3 |
| CVE-2011-1126 | – | Apr 1 | VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +6 more |
| CVE-2010-4297 | – | Dec 6 | The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.5; 7.0; +4 more |
| CVE-2010-4296 | – | Dec 6 | vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion… Affected: 7.0; 7.0.1; 7.1; 7.1.1; 7.1.2 |
| CVE-2010-4295 | – | Dec 6 | Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware… Affected: 7.0; 7.0.1; 7.1; 7.1.1; 7.1.2 |
| CVE-2010-4294 | – | Dec 6 | The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +5 more |
| CVE-2010-3277 | – | Sep 28 | The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation… Affected: 7.0; 7.0.1; 7.1; 7.1.1 |
| CVE-2009-4811 | – | Apr 27 | VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459,… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 7.0; +1 more |
| CVE-2010-1142 | – | Apr 12 | VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3 |
| CVE-2010-1141 | – | Apr 12 | VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3 |
| CVE-2010-1140 | – | Apr 12 | The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before 3.0.1 build 227600 on Windows might allow host OS users to gain privileges by… Affected: 7.0 |
| CVE-2010-1139 | – | Apr 12 | Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3 |
| CVE-2010-1138 | – | Apr 12 | The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1… Affected: 7.0; 6.5.0; 6.5.1; 6.5.2; 6.5.3 |