The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation virtualization platforms arises from reading data beyond the buffer in memory, allowing attackers to exploit this to disclose protected information.

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation virtualization platforms is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

ESXi 6.0 / 6.5 / 6.7 Multiple Vulnerabilities (VMSA-2019-0008)(MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)(Remote Check)

The remote VMware ESXi host is version 6.0, 6.5 or 6.7 and is missing a security patch. It is, therefore, missing microcode updates to address the following vulnerabilities: - Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12126 - Microarchitectural Load Port Data Sampling MLPDS...

VMSA-2019-0008 : MDS Vulnerabilities (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

a. Hypervisor Specific and Hypervisor-Assisted Guest Mitigations for MDS vulnerabilities vCenter Server, ESXi, Workstation, and Fusion updates support Hypervisor-Specific and Hypervisor-Assisted Guest Mitigations for MDS speculative execution vulnerabilities. These updates expose new CPU control...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in vCenter Server, ESXi, Workstation, and Fusion. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

ESXi 6.5 / 6.7 Multiple Vulnerabilities (VMSA-2019-0006) (Remote Check)

The remote VMware ESXi host is version 6.5 or 6.7 and is missing a security patch. It is, therefore, vulnerable to multiple vulnerabilities, including: - An out-of-bounds read vulnerability exists in the vertex shader component of the 3D-acceleration feature could allow an authenticated attacker ...

VMSA-2019-0006 : VMware ESXi, Workstation and Fusion updates address multiple out-of-bounds read vulnerabilities

a. VMware ESXi, Workstation and Fusion vertex shader out-of-bounds read vulnerability VMware ESXi, Workstation and Fusion updates address an out-of-bounds vulnerability with the vertex shader functionality. Exploitation of this issue requires an attacker to have access to a virtual machine with 3...

CVE-2019-5517

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6, Fusion 11.x before 11.0.3 and 10.x before 10.1.6 contain multiple out-of-bounds read vulnerabilities in the shader translator. Exploitation of these issues requires...

CVE-2019-5520

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6, Fusion 11.x before 11.0.3 and 10.x before 10.1.6 updates address an out-of-bounds read vulnerability. Exploitation of this issue requires an attacker to have access...

CVE-2019-5520

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6, Fusion 11.x before 11.0.3 and 10.x before 10.1.6 updates address an out-of-bounds read vulnerability. Exploitation of this issue requires an attacker to have access...

Design/Logic Flaw

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6, Fusion 11.x before 11.0.3 and 10.x before 10.1.6 updates address an out-of-bounds read vulnerability. Exploitation of this issue requires an attacker to have access...

Design/Logic Flaw

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6, Fusion 11.x before 11.0.3 and 10.x before 10.1.6 contain multiple out-of-bounds read vulnerabilities in the shader translator. Exploitation of these issues requires...

Design/Logic Flaw

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6, Fusion 11.x before 11.0.3 and 10.x before 10.1.6 updates address an out-of-bounds vulnerability with the vertex shader functionality. Exploitation of this issue...

CVE-2019-5517

CVE-2019-5517 affects VMware products (ESXi 6.5/6.7, Workstation 14.x/15.x, Fusion 10.x/11.x) and stems from out-of-bounds reads in the shader translator used by the 3D-acceleration feature. Exploitation requires VM access with 3D graphics enabled and can lead to information disclosure or guest-V...

CVE-2019-5517

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6, Fusion 11.x before 11.0.3 and 10.x before 10.1.6 contain multiple out-of-bounds read vulnerabilities in the shader translator. Exploitation of these issues requires...

CVE-2019-5520

CVE-2019-5520 concerns an out-of-bounds read in the 3D-acceleration feature across VMware products. Affected are VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), VMware Workstation (14.x before 14.1.6 and 15.x before 15.0.3), and VMware Fusion (10.x before 10.1.6 an...

CVE-2019-5516

CVE-2019-5516 affects VMware products: ESXi (6.7 before ESXi670-201904101-SG; 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3; 14.x before 14.1.6), and Fusion (11.x before 11.0.3; 10.x before 10.1.6). The issue is an out-of-bounds read in the vertex shader functionality of the 3D-a...

CVE-2019-5516

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6, Fusion 11.x before 11.0.3 and 10.x before 10.1.6 updates address an out-of-bounds vulnerability with the vertex shader functionality. Exploitation of this issue...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in ESXi, Workstation, and Fusion. An attacker could exploit some of these vulnerabilities to obtain sensitive information. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review VMware...

Qualys Policy Compliance Notification: Policy Library Update

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...

CVE-2019-5518

VMware ESXi 6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001, Workstation 15.x before 15.0.4, 14.x before 14.1.7, Fusion 11.x before 11.0.3, 10.x before 10.1.6 contain an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI Universal Host...