CVE-2013-1406

CVE-2013-1406 affects VMware VMCI in vmci.sys across VMware Workstation (8.x before 8.0.5; 9.x before 9.0.1), VMware Fusion (4.1 before 4.1.4; 5.0 before 5.0.2), VMware View (4.x before 4.6.2; 5.x before 5.1.2), VMware ESXi/ESX (4.0–5.1). Root cause: improper restriction of memory allocation by V...

CVE-2019-5518

CVE-2019-5518 concerns an out-of-bounds read/write in the virtual USB 1.1 UHCI for VMware products. A guest VM with a virtual USB controller can potentially execute code on the host. Affected: VMware ESXi (6.0/6.5/6.7), Workstation (14.x/15.x), and Fusion (10.x/11.x). Root cause: out-of-bounds ac...

CVE-2024-22273

CVE-2024-22273 affects VMware ESXi, Workstation, and Fusion storage controllers, with an out-of-bounds read/write flaw that may let a VM-adjacent attacker cause a denial of service or, in conjunction with other issues, execute code on the hypervisor. Exploitation is described as local (requires a...

CVE-2008-4915

CVE-2008-4915 documents a privilege-escalation flaw in CPU hardware emulation across VMware products (Workstation, Player, Server, ESX/ESXi, and related variants) when running 32/64-bit guest OS. The trap-flag handling flaw allows an authenticated guest OS user to gain privileges on the guest OS....

CVE-2015-6933

CVE-2015-6933 affects VMware Tools HGFS across VMware Workstation (11.x prior to 11.1.2), VMware Player (7.x prior to 7.1.2), VMware Fusion (7.x prior to 7.1.2), and VMware ESXi (5.0–6.0). Root cause: HGFS/shared folders component vulnerability leading to guest OS privilege escalation or guest ke...

CVE-2009-2416

CVE-2009-2416 is a use-after-free in libxml2 (versions 2.5.10, 2.6.16, 2.6.26, 2.6.27, 2.6.32) and libxml 1.8.17 triggered by crafted Notation/Enumeration attribute types in a DTD; leads to denial of service (application crash). Related CVE-2009-2414 is a stack-growth DoS via deep DTD structures....

CVE-2017-4941

CVE-2017-4941 affects VMware products: ESXi 6.0 (pre-ESXi600-201711101-SG) and ESXi 5.5 (pre-ESXi550-201709101-SG); Workstation 12.x (pre-12.5.8); and Fusion 8.x (pre-8.5.9). The vulnerability is a stack overflow in the remote management function triggered by a specific set of VNC packets, which ...

CVE-2018-6982

CVE-2018-6982 affects VMware ESXi 6.5 and 6.7 (and related VMware products) due to uninitialized stack memory usage in the vmxnet3 virtual network adapter, which may leak information from host to guest when vmxnet3 is enabled. The Connected documents corroborate that ESXi 6.7 requires ESXi670-201...

CVE-2021-22042

CVE-2021-22042 affects VMware ESXi: an unauthorized-access flaw where VMX process privileges can access settingsd authorization tickets, allowing a local attacker with VMX privileges to reach the settingsd service running as a high-privileged user. Reported in multiple feeds (NVD, Red Hat, Nessus...

CVE-2020-3964

CVE-2020-3964 is an information-leak vulnerability in the EHCI USB controller affecting VMware products. A local attacker with access to a guest VM can read privileged information from the hypervisor memory, under conditions described by VMware and Red Hat/CNVD disclosures. Affected are: ESXi 7.0...

CVE-2017-4903

CVE-2017-4903 corresponds to an uninitialized stack memory usage in SVGA affecting VMware products. Affected: ESXi 6.5 and older 6.x/5.5 builds listed as without patches (e.g., ESXi650-201703410-SG; ESXi600-201703401-SG; ESXi600-201703403-SG; ESXi600-201703402-SG; ESXi550-201703401-SG); Workstati...

CVE-2009-2267

CVE-2009-2267 affects VMware products (Workstation, Player, ACE, Server, Fusion, ESXi/ESX) where Virtual-8086 mode is used. The root cause is an improper setting of the exception code on a page fault (#PF), allowing guest OS users to gain privileges on the guest OS by supplying a crafted value fo...

CVE-2020-3976

CVE-2020-3976 affects VMware ESXi and vCenter Server, describing a partial denial-of-service in their authentication services. The public details identify a moderate impact (CVSSv3 base score 5.3) with network access required and low attack complexity, but do not provide exploit specifics in the ...

CVE-2018-6972

Summary of CVE-2018-6972 details from provided documents : VMware products — ESXi (versions listed as affected before certain update bundles), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) — are affected by a denial-of-service vulnerability due to a NULL pointer dereference in...

CVE-2019-5520

CVE-2019-5520 concerns an out-of-bounds read in the 3D-acceleration feature across VMware products. Affected are VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), VMware Workstation (14.x before 14.1.6 and 15.x before 15.0.3), and VMware Fusion (10.x before 10.1.6 an...

CVE-2020-3963

CVE-2020-3963 affects VMware ESXi (7.0 pre-7.0.0-1.20.16321839; 6.7 pre-670-202006401-SG; 6.5 pre-650-202005401-SG), Workstation 15.x pre-15.5.2, and Fusion 11.x pre-11.5.2 with a use-after-free in PVNVRAM that could allow a local attacker with VM access to read privileged memory. VMware’s VMSA-2...

CVE-2017-4902

CVE-2017-4902 refers to a Heap Buffer Overflow in SVGA that can allow a guest to execute code on the host. Affected products are: VMware ESXi 6.5 (without patch ESXi650-201703410-SG) and ESXi 5.5 (without patch ESXi550-201703401-SG); VMware Workstation Pro/Player 12.x before 12.5.5; VMware Fusion...

CVE-2018-6965

CVE-2018-6965/6966/6967 describe an out-of-bounds read in the shader translator affecting VMware ESXi 6.7 (before ESXi670-201806401-BG), Workstation 14.x (before 14.1.2), and Fusion 10.x (before 10.1.2). The issue can lead to information disclosure and, for users with normal privileges, VM crashe...

CVE-2020-3965

CVE-2020-3965 affects VMware ESXi, Workstation, and Fusion, describing an information-leak in the XHCI USB controller that could let a local VM attacker read privileged information from hypervisor memory. Affected: ESXi 7.0 (pre-1.20.16321839), 6.7 (pre-670-202006401-SG), 6.5 (pre-650-202005401-S...

CVE-2020-3958

CVE-2020-3958 affects VMware products (ESXi, Workstation, Fusion): a denial-of-service in the shader functionality. A non-administrative attacker with access to a VM may crash the vmx process, causing a DoS. Affected versions include ESXi 6.7 prior to 670-202004101-SG and ESXi 6.5 prior to 650-20...

CVE-2017-4925

CVE-2017-4925 is a NULL pointer dereference vulnerability that occurs when handling guest RPC requests, enabling a locally authenticated attacker with normal user privileges to crash affected VMs. Affected products/versions include VMware ESXi 6.5 (without patch ESXi650-201707101-SG), 6.0 (withou...

CVE-2020-3982

CVE-2020-3982 is a TOCTOU/L1 out-of-bounds write vulnerability in VMware ESXi (7.0 prior to 7.0.1-0.0.16850804; 6.7 prior to 670-202008101-SG; 6.5 prior to 650-202007101-SG) and related Workstation 15.x and Fusion 11.x (before 11.5.6). It arises from an ACPI device TOCTOU/TOC2U flaw that may let ...

CVE-2021-21995

CVE-2021-21995 affects VMware ESXi OpenSLP, enabling a remote attacker to trigger a heap out-of-bounds read over port 427 and cause a denial-of-service. OpenSLP DOS is documented across multiple sources (NVD, Red Hat, VMware). Mitigation is via VMware security advisory VMSA-2021-0014 and related ...

CVE-2020-3962

VMware CVE-2020-3962 affects multiple products: ESXi (7.0 prior to 7.0.0-1.20.16321839; 6.7 prior to 202004101-SG; 6.5 prior to 202005401-SG), Workstation (15.x prior to 15.5.5), and Fusion (11.x prior to 11.5.5). The root cause is a use-after-free in the SVGA device. A local attacker who has acc...

CVE-2010-4263

The CVE-2010-4263 issue involves the Intel igb driver (drivers/net/igb/igb_main.c) in the Linux kernel and its handling of VLAN-tagged frames when SR-IOV and promiscuous mode are enabled but no VLANs are registered. In kernels before 2.6.34, processing such frames could trigger a NULL pointer der...

CVE-2017-4940

The CVE-2017-4940 issue affects the ESXi Host Client component of VMware ESXi. It is a stored cross-site scripting (XSS) vulnerability allowing an attacker to inject Javascript that may execute when other users access the Host Client. Affected product versions; ESXi 6.5 before ESXi650-201712103-S...

CVE-2016-5331

CVE-2016-5331 describes a CRLF/HTTP header injection vulnerability in VMware vCenter Server 6.0 (before U2) and ESXi 6.0. The underlying issue is CRLF injection that allows remote attackers to manipulate HTTP headers and perform HTTP response splitting via unspecified vectors. Impact is stated as...

CVE-2016-5330

CVE-2016-5330 describes a local privilege-escalation in VMware HGFS (Shared Folders) where a Trojan horse DLL loaded from the current working directory or other insecure paths can be executed with the rights of the affected guest/user. The vulnerability affects multiple VMware products and versio...

CVE-2018-6977

CVE-2018-6977 affects VMware ESXi (6.7/6.5/6.0), Workstation (14/15.x) and Fusion (10/11.x) via an infinite loop in a 3D shader that can cause a guest VM to become unresponsive and, in some cases, make the host/other VMs unresponsive. Public details describe a denial-of-service condition triggere...

CVE-2020-3995

CVE-2020-3995: VMware VMCI host driver memory leak in ESXi/Workstation/Fusion (affected versions listed in VMware advisories) can permit a VM-guest attacker with access to trigger memory leakage, potentially exhausting hypervisor memory during sustained attacks. Concrete details across sources sh...

CVE-2017-4933

Summary: CVE-2017-4933 affects VMware ESXi (6.5 prior to ESXi650-201710401-BG), VMware Workstation (12.x prior to 12.5.8), and VMware Fusion (8.x prior to 8.5.9). It describes a heap overflow in the VNC component that can be triggered by a specific set of VNC packets in an authenticated VNC sessi...

CVE-2019-5536

VMware CVE-2019-5536 affects multiple products: ESXi (6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG), VMware Workstation (15.x before 15.5.0), and VMware Fusion (11.x before 11.5.0). Vulnerability: a denial-of-service in the shader functionality that can be triggered by a gu...

CVE-2017-4904

CVE-2017-4904 concerns VMware products with uninitialized memory usage in the XHCI controller, potentially allowing a guest to execute code on the host. Affected: VMware ESXi (versions 5.5 and later) without patches ESXi650-201703410-SG, ESXi600-201703401-SG, ESXi600-201703403-SG, ESXi600-2017034...

CVE-2020-3959

Summary: CVE-2020-3959 affects VMware virtualization products (ESXi, Workstation, Fusion). The vulnerability is a memory leak in the VMCI module that, under local non-administrative VM access, can crash the vmx process and cause a partial denial of service. The initial description specifies affec...

CVE-2020-3971

VMware CVE-2020-3971 describes a heap-overflow vulnerability in the vmxnet3 virtual network adapter affecting VMware ESXi (6.7/6.5 lines; 7.0 later), Workstation, and Fusion. An attacker with local access to a VM that has a vmxnet3 adapter present may read privileged information from physical/hyp...

CVE-2024-37086

CVE-2024-37086 affects VMware ESXi with an out-of-bounds read condition. The vulnerability can be triggered by a malicious actor with local administrative privileges on a VM that has an existing snapshot, potentially causing a denial-of-service on the host. Several connected sources corroborate a...

CVE-2020-3969

CVE-2020-3969 is an off-by-one heap-overflow in the SVGA device affecting VMware ESXi (7.0 prior to 7.0.0-1.20.16321839; 6.7 prior to 202004101-SG; 6.5 prior to 202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5). A local attacker with access to a VM that has 3D graph...

CVE-2010-4297

CVE-2010-4297 describes an OS command injection flaw in the VMware Tools update functionality that affects multiple VMware products (Workstation, Player, Fusion, ESXi/ESX/Server, etc.). The root cause is improper validation of user-supplied input during tool update, allowing a local host user to ...

CVE-2011-2145

CVE-2011-2145 affects VMware Tools HGFS. When a Solaris or FreeBSD guest OS is used, mount.vmhgfs in the Host/Guest File System can allow a guest OS user to write to arbitrary guest files via unspecified vectors due to a procedural error. Affected products and versions (from VMware/VMware Tools r...

CVE-2014-1207

CVE-2014-1207 affects VMware ESXi/ESX: versions ESXi 4.0–5.1 and ESX 4.0–4.1 are vulnerable via a NULL pointer dereference in NFC traffic handling, allowing remote attackers to cause a denial of service by intercepting/modifying NFC traffic. The issue is evidenced in multiple sources (NVD entry a...

CVE-2018-6966

CVE-2018-6966 concerns VMware products: ESXi 6.7 prior to ESXi670-201806401-BG, Workstation 14.x prior to 14.1.2, and Fusion 10.x prior to 10.1.2. The issue is an out-of-bounds read in the shader translator. Exploitation may lead to information disclosure or allow attackers with normal user privi...

CVE-2019-5516

CVE-2019-5516 affects VMware products: ESXi (6.7 before ESXi670-201904101-SG; 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3; 14.x before 14.1.6), and Fusion (11.x before 11.0.3; 10.x before 10.1.6). The issue is an out-of-bounds read in the vertex shader functionality of the 3D-a...

CVE-2014-8370

CVE-2014-8370 affects VMware products including Workstation 10.x before 10.0.5, Player 6.x before 6.0.5, Fusion 6.x before 6.0.5, and ESXi 5.0–5.5. The vulnerability allows host OS users to gain host privileges or cause a denial of service via an arbitrary write to a file by modifying a configura...

CVE-2012-1516

Vulnerability CVE-2012-1516 affects VMware VMX RPC handling in ESXi/ESX 3.5–4.1 (and related Workstation/Player components). A guest user could cause a denial of service or, potentially, execute code on the host via data-pointer related paths. Exploitation relies on triggering problematic RPC han...

CVE-2019-5517

CVE-2019-5517 affects VMware products (ESXi 6.5/6.7, Workstation 14.x/15.x, Fusion 10.x/11.x) and stems from out-of-bounds reads in the shader translator used by the 3D-acceleration feature. Exploitation requires VM access with 3D graphics enabled and can lead to information disclosure or guest-V...

CVE-2014-3793

CVE-2014-3793 affects VMware Tools across VMware Workstation 10.x (<10.0.2), VMware Player 6.x (<6.0.2), VMware Fusion 6.x (

CVE-2018-6967

CVE-2018-6967 affects VMware ESXi 6.7 (before the patch ESXi670-201806401-BG), Workstation 14.x (before 14.1.2), and Fusion 10.x (before 10.1.2). The issue is an out-of-bounds read in the shader translator, which can lead to information disclosure or cause a VM crash when exploited by a user with...

CVE-2020-3967

VMware CVE-2020-3967 is a heap-overflow vulnerability in the EHCI USB 2.0 controller across ESXi (7.0 before 7.0.0-1.20.16321839, 6.7 before 202004101-SG, 6.5 before 202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5). A local attacker with VM access can exploit it to...

CVE-2014-4241

CVE-2014-4241 affects Oracle WebLogic Server within Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0. The initial entry describes an unspecified vulnerability that allows remote attackers to affect integrity via vectors related to WLS - Web Services. Connected documents provide context for WebLogic...

CVE-2012-1508

CVE-2012-1508 affects the XPDM display driver in VMware products (ESXi/ESX 4.0–4.1 and 5.0; View prior to 4.6.1). The issue is a NULL pointer dereference in the XPDM/WDDM display stack that can allow guest-OS privilege escalation or cause a guest-OS denial of service via unspecified vectors. Conn...