779 matches found
CVE-2020-3999
VMware ESXi 7.0 prior to ESXi70U1c-17325551, VMware Workstation 16.x prior to 16.0 and 15.x prior to 15.5.7, VMware Fusion 12.x prior to 12.0 and 11.x prior to 11.5.7 and VMware Cloud Foundation contain a denial of service vulnerability due to improper input validation in GuestInfo. A malicious...
VMware Workstation SetGuestInfo Null Pointer Dereference Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...
VMware ESXi and VMware Workstation Code Issue Vulnerability
Vmware VMware ESXi and VMware Workstation are both products of Vmware, Inc. VMware ESXi is a server virtualization platform that can be installed directly on physical servers.VMware Workstation is a set of virtual machine software. VMware ESXi is a server virtualization platform that can be...
The vulnerability of the XHCI interface of USB controllers in VMware ESXi, VMware Workstation, VMware Fusion, and the VMware Cloud Foundation virtualization platform allows a perpetrator to execute arbitrary code.
The vulnerability of the XHCI Extensible Host Controller Interface interface of USB controllers in VMware ESXi, VMware Workstation, VMware Fusion, and VMware Cloud Foundation virtualization platforms is related to the use of memory after release. Exploiting this vulnerability can allow an attacke...
KLA12101 Use after free vulnerability in VMware Workstation and Player
A use after free vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories VMSA-2020-0026 Related products VMware-Workstation VMware-Player CVE list CVE-2020-4004 critical Solution Update to the latest...
VMSA-2020-0026:VMware ESXi, Workstation and Fusion updates address use-after-free and privilege escalation vulnerabilities
Advisory ID: VMSA-2020-0026.1 CVSSv3 Range: 8.8 - 9.3 Issue Date:2020-11-19 Updated On: 2020-11-24 CVEs: CVE-2020-4004, CVE-2020-4005 Synopsis: VMware ESXi, Workstation and Fusion updates address use-after-free and privilege escalation vulnerabilities CVE-2020-4004, CVE-2020-4005 RSS Feed Downloa...
The vulnerability of VMware ESXi, VMware Workstation, and VMware Fusion relates to writing beyond the buffer boundaries, allowing attackers to compromise the integrity of protected information.
The vulnerability of VMware ESXi, VMware Workstation, and VMware Fusion lies in the issue of writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...
The vulnerability of the openslp hypervisor packages in VMware ESXi, VMware Workstation, and VMware Fusion allows a malicious actor to execute arbitrary code, cause system failures, or gain unauthorized access to protected information.
The vulnerability of the openslp hypervisor packages in VMware ESXi, VMware Workstation, and VMware Fusion relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause system failures, or gain unauthorized access to protecte...
VMware Workstation BDOOR_CMD_PATCH_ACPI_TABLES Time-Of-Check Time-Of-Use Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...
VMSA-2020-0023:VMware ESXi, Workstation, Fusion and NSX-T updates address multiple security vulnerabilities
Advisory ID: VMSA-2020-0023.3 CVSSv3 Range: 5.9 - 9.8 Issue Date:2020-10-20 Updated On: 2020-11-24 CVEs: CVE-2020-3981, CVE-2020-3982, CVE-2020-3992, CVE-2020-3993, CVE-2020-3994, CVE-2020-3995 Synopsis: VMware ESXi, Workstation, Fusion and NSX-T updates address multiple security vulnerabilities...
The vulnerability of the Cortado ThinPrint parser for JPEG2000 from the VMware Workstation and Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information and cause service failures.
The vulnerability of the Cortado ThinPrint parser for JPEG2000 on the VMware Workstation and Horizon Client for Windows hypervisor platform is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized...
The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to...
The vulnerability of the Cortado ThinPrint parser component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information and cause service failures.
The vulnerability of the Cortado ThinPrint parser on the EMF platform in VMware Workstation and Horizon Client for Windows involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected...
The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a attacker to trigger a service failure.
The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause...
The vulnerability of the Cortado ThinPrint parser EMR STRETCHDIBITS component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information and cause service failures.
The vulnerability of the Cortado ThinPrint parser EMR STRETCHDIBITS component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a...
CVE-2020-3988
VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an out-of-bounds read vulnerability in Cortado ThinPrint component JPEG2000 parser. A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service...
CVE-2020-3990
VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to leak memory from...
CVE-2020-3987
VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an out-of-bounds read vulnerability in Cortado ThinPrint component EMR STRETCHDIBITS parser. A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial...
CVE-2020-3986
VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an out-of-bounds read vulnerability in Cortado ThinPrint component EMF Parser. A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service...
Out-of-bounds
VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an out-of-bounds read vulnerability in Cortado ThinPrint component EMR STRETCHDIBITS parser. A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial...