KLA11277 Multiple vulnerabilities in VMware products

Multiple out-of-bounds read vulnerabilities have been found in VMware Workstation and Fusion. Malicious users can exploit these vulnerabilities to obtain sensitive information or gain privileges.

Original advisories

VMSA-2018-0016

Related products

VMware-Workstation

VMware-Fusion

CVE list

CVE-2018-6966 high

CVE-2018-6967 high

CVE-2018-6965 high

Solution

Update to latest versionDownload Workstation

Download VMware Fusion

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• VMware Workstation earlier than 14.1.2VMware Fusion earlier than 10.1.2VMware Workstation earlier than 14.1.2VMware Fusion earlier than 10.1.2