VMware Fusion 安全漏洞

VMware Fusion is a virtual machine software developed by VMware Corporation in the United States, designed specifically for running Windows applications on Apple machines. VMware Fusion has a security vulnerability, which stems from an TOCTOU issue during the execution of SETUID binary files. Thi...

CVE-2025-62627

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

CVE-2025-62623

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2025-62624

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

GHSA-PP2P-VFWH-22HM vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-aws, linux-gcp...

CVE-2026-43119 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-aws, linux-gcp...

CVE-2026-43174 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

GHSA-M3W5-78CH-J8HG vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

GHSA-V974-2CJF-22Q5 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

GHSA-86C9-4W26-QF4C vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

CVE-2026-43234 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

CVE-2026-43220 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

CVE-2025-71285 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

GHSA-74JP-62V9-RVJF vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-aws, linux-gcp...

CVE-2026-43120 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-vmware, linux-aws, linux-gcp...

GHSA-7G25-3CHF-PPWR vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

CVE-2026-43219 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

GHSA-FGQH-8XWQ-C3JP vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

PT-2026-40932

Name of the Vulnerable Software and Affected Versions VMware Fusion versions prior to 26H1 Description VMware Fusion contains a TOCTOU Time-of-check Time-of-use race condition that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user...

VMSA-2026-0003: VMware Fusion updates address privilege escalation vulnerability (CVE-2026-41702)

Advisory ID: | VMSA-2026-0003 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.8 Synopsis: | VMware Fusion updates address privilege escalation vulnerability CVE-2026-41702 Issue date: | 2026-05-14 Updated on: | 2026-05-14 Initial Advisory CVEs | CVE-2026-41702 1. Impacted Products VMware...