CVE-2018-6965

VMware ESXi 6.7 before ESXi670-201806401-BG, Workstation 14.x before 14.1.2, and Fusion 10.x before 10.1.2 contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user...

VMware Workstation 14 Shader Functionality Denial Of Service

Summary An exploitable denial-of-service vulnerability exists in the VMware Workstation 14. A specially crafted pixel shader can cause a read access violation resulting in, at least, denial of service. An attacker can provide a specially crafted shader file either in binary or text form to trigge...

VMware Workstation Drag and Drop File Vulnerability

VMware Workstation is a desktop virtual computer. A drag-and-drop file vulnerability exists in VMware Workstation version 12.5.2. An attacker can exploit the vulnerability to launch a denial of service attack...

VMware Workstation 14.x < 14.1.2 Multiple DoS (VMSA-2018-0013)

The version of VMware Workstation installed on the remote Windows host is 14.x prior to 14.1.2. It is, therefore, missing a security update that fixes multiple RPC related flaws that allow denial of service attacks. C Tenable Network Security, Inc. include"compat.inc"; if description...

VMware Workstation ghi update Null Pointer Dereference Denial of Service Vulnerability

This vulnerability allows local attackers to deny service on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on a guest OS in order to exploit this vulnerability. The specific flaw exists within the ghi.guest.trayIcon.update...

VMware Workstation and Fusion Denial of Service Vulnerability (CNVD-2018-10313)

VMWare Workstation and Fusion are both desktop virtual computer software from VMware. The former provides virtual machine functionality that allows you to run several different operating systems at the same time, while the latter is virtual machine software used to run Windows applications on App...

Null pointer dereference

VMware Workstation 14.x before 14.1.2 and Fusion 10.x before 10.1.2 contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine...

VMware Workstation and Fusion Denial of Service Vulnerabilities

VMware Workstation is a desktop virtual computer software.VMware Fusion is the best way to seamlessly run Windows on Mac computers, allowing for a seamless integration of Mac systems and PCs. VMware Workstation and Fusion have a denial of service vulnerability that can be triggered by an attacker...

CVE-2018-6957

VMware Workstation 14.x before 14.1.1, 12.x and Fusion 10.x before 10.1.1 and 8.x contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled...

VMware Workstation 12.x / 14.x < 14.1.0 Multiple Vulnerabilities (VMSA-2018-0003)

The version of VMware Workstation installed on the remote Windows host is 12.x or 14.x prior to 14.1.0. It is, therefore, affected by multiple vulnerabilities including disclosure of memory contents or a DoS. Note that Nessus has not tested for these issues but has instead relied only on the...

VMware Workstation 12.x < 12.5.9 / 14.x < 14.1.1 Multiple Vulnerabilities (VMSA-2018-0004) (VMSA-2018-0005) (Spectre)

The version of VMware Workstation installed on the remote Windows host is 14.x prior to 14.1.1 or 12.x prior to 12.5.9. It is, therefore, missing security updates that add hypervisor-assisted guest remediation for a speculative execution vulnerability CVE-2017-5715. These updates will allow guest...

Buffer Overflow Vulnerability in Multiple VMware Products

VMWare Workstation and Fusion are both desktop virtual computer software from VMware, the former provides virtual machine functionality that allows you to run several different operating systems at the same time, and the latter is virtual machine software used to run Windows applications on a...

CVE-2017-4949

VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a guest to execute code on the host. Note: IPv6 mode for VMNAT is not enabled by default...

KLA11173 OSI vulnerability in VMware Products

A bounds check bypass and branch target injection vulnerability was found in VMware ESXi, VMWare Workstation and VMware Fusion. By exploiting this vulnerability malicious users can obtain sensitive information. Original advisories VMSA-2018-0004 VMSA-2018-0002 Exploitation Public exploits exist f...

Unspecified Vulnerability in VMware Workstation and Fusion VMware Tools

VMWare Workstation and Fusion are both desktop virtual computer software from VMware, the former provides virtual machine functionality to run multiple different operating systems at the same time, and the latter is a virtual machine software used to run Windows applications on a Mac.VMware Tools...

VMWare Workstation and Horizon View Client Read Across Boundaries Vulnerability

VMWare Workstation and Horizon View Client are both products of VMware. The former is a set of desktop virtualization software; the latter is a client device that allows access to VMware Horizon desktops from any location. An out-of-bounds read vulnerability exists in the TPView.dll file in VMwar...

CVE-2017-4948

VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...

Out-of-bounds

VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...

CVE-2017-4948

VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...

VMware Workstation ALSA Config File Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware Workstation ALSA Config File Local Privilege Escalation', 'Description' = %q This module exploits a vulnerability in VMware Workstation Pr...