CVE-2018-6973

VMware Workstation 14.x before 14.1.3 and Fusion 10.x before 10.1.3 contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host...

VMware Workstation 14.x < 14.1.3 Speculative Execution Side Channel Vulnerability (Foreshadow) (VMSA-2018-0020) (Linux)

The version of VMware Workstation installed on the remote Linux host is 14.x prior to 14.1.3. It is, therefore, affected by a speculative execution side channel attack known as L1 Terminal Fault L1TF. An attacker who successfully exploited L1TF may be able to read privileged data across trust...

VMware Workstation 14.x < 14.1.3 Speculative Execution Side Channel Vulnerability (Foreshadow) (VMSA-2018-0020)

The version of VMware Workstation installed on the remote Windows host is 14.x prior to 14.1.3. It is, therefore, affected by a speculative execution side channel attack known as L1 Terminal Fault L1TF. An attacker who successfully exploited L1TF may be able to read privileged data across trust...

VMware Tools update addresses an out-of-bounds read vulnerability

VMware Tools for Windows VMware Tools Shared Folders out-of-bounds read vulnerability VMware Tools for Windows contains an out-of-bounds read vulnerability in the Shared Folders feature. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate...

CVE-2018-6965

VMware ESXi 6.7 before ESXi670-201806401-BG, Workstation 14.x before 14.1.2, and Fusion 10.x before 10.1.2 contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user...

VMware Workstation 14 Shader Functionality Denial Of Service

Summary An exploitable denial-of-service vulnerability exists in the VMware Workstation 14. A specially crafted pixel shader can cause a read access violation resulting in, at least, denial of service. An attacker can provide a specially crafted shader file either in binary or text form to trigge...

VMware Workstation Drag and Drop File Vulnerability

VMware Workstation is a desktop virtual computer. A drag-and-drop file vulnerability exists in VMware Workstation version 12.5.2. An attacker can exploit the vulnerability to launch a denial of service attack...

VMware Workstation ghi update Null Pointer Dereference Denial of Service Vulnerability

This vulnerability allows local attackers to deny service on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on a guest OS in order to exploit this vulnerability. The specific flaw exists within the ghi.guest.trayIcon.update...

VMware Workstation 14.x < 14.1.2 Multiple DoS (VMSA-2018-0013)

The version of VMware Workstation installed on the remote Windows host is 14.x prior to 14.1.2. It is, therefore, missing a security update that fixes multiple RPC related flaws that allow denial of service attacks. C Tenable Network Security, Inc. include"compat.inc"; if description...

VMware Workstation and Fusion Denial of Service Vulnerability (CNVD-2018-10313)

VMWare Workstation and Fusion are both desktop virtual computer software from VMware. The former provides virtual machine functionality that allows you to run several different operating systems at the same time, while the latter is virtual machine software used to run Windows applications on App...

Null pointer dereference

VMware Workstation 14.x before 14.1.2 and Fusion 10.x before 10.1.2 contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine...

VMware Workstation and Fusion Denial of Service Vulnerabilities

VMware Workstation is a desktop virtual computer software.VMware Fusion is the best way to seamlessly run Windows on Mac computers, allowing for a seamless integration of Mac systems and PCs. VMware Workstation and Fusion have a denial of service vulnerability that can be triggered by an attacker...

CVE-2018-6957

VMware Workstation 14.x before 14.1.1, 12.x and Fusion 10.x before 10.1.1 and 8.x contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled...

VMware Workstation 12.x / 14.x < 14.1.0 Multiple Vulnerabilities (VMSA-2018-0003)

The version of VMware Workstation installed on the remote Windows host is 12.x or 14.x prior to 14.1.0. It is, therefore, affected by multiple vulnerabilities including disclosure of memory contents or a DoS. Note that Nessus has not tested for these issues but has instead relied only on the...

Buffer Overflow Vulnerability in Multiple VMware Products

VMWare Workstation and Fusion are both desktop virtual computer software from VMware, the former provides virtual machine functionality that allows you to run several different operating systems at the same time, and the latter is virtual machine software used to run Windows applications on a...

VMware Workstation 12.x < 12.5.9 / 14.x < 14.1.1 Multiple Vulnerabilities (VMSA-2018-0004) (VMSA-2018-0005) (Spectre)

The version of VMware Workstation installed on the remote Windows host is 14.x prior to 14.1.1 or 12.x prior to 12.5.9. It is, therefore, missing security updates that add hypervisor-assisted guest remediation for a speculative execution vulnerability CVE-2017-5715. These updates will allow guest...

CVE-2017-4949

VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a guest to execute code on the host. Note: IPv6 mode for VMNAT is not enabled by default...

KLA11173 OSI vulnerability in VMware Products

A bounds check bypass and branch target injection vulnerability was found in VMware ESXi, VMWare Workstation and VMware Fusion. By exploiting this vulnerability malicious users can obtain sensitive information. Original advisories VMSA-2018-0004 VMSA-2018-0002 Exploitation Public exploits exist f...

Unspecified Vulnerability in VMware Workstation and Fusion VMware Tools

VMWare Workstation and Fusion are both desktop virtual computer software from VMware, the former provides virtual machine functionality to run multiple different operating systems at the same time, and the latter is a virtual machine software used to run Windows applications on a Mac.VMware Tools...

VMWare Workstation and Horizon View Client Read Across Boundaries Vulnerability

VMWare Workstation and Horizon View Client are both products of VMware. The former is a set of desktop virtualization software; the latter is a client device that allows access to VMware Horizon desktops from any location. An out-of-bounds read vulnerability exists in the TPView.dll file in VMwar...