Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
vmware fusion pro vulnerabilities and exploits
(subscribe to this query)
7.2
CVSSv2
CVE-2017-4924
VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x prior to 12.5.7) and Fusion (8.x prior to 8.5.8) contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host.
Vmware Fusion
Vmware Workstation Pro
Vmware Esxi 6.5
7.2
CVSSv2
CVE-2017-4902
VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x before 12.5.5; and Fusion Pro / Fusion 8.x before 8.5.6 have a Heap Buffer Overflow in SVGA. This issue may allow a guest to execute code on the host.
Vmware Workstation Player
Vmware Workstation Pro
Vmware Esxi 5.5
Vmware Esxi 6.5
Vmware Fusion
Vmware Fusion Pro
7.2
CVSSv2
CVE-2017-4904
The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x be...
Vmware Fusion
Vmware Fusion Pro
Vmware Workstation Player
Vmware Workstation Pro
Vmware Esxi 5.5
Vmware Esxi 6.0
Vmware Esxi 6.5
7.2
CVSSv2
CVE-2017-4903
VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x before 12.5.5; and Fusion...
Vmware Workstation Player
Vmware Workstation Pro
Vmware Esxi 5.5
Vmware Esxi 6.0
Vmware Esxi 6.5
Vmware Fusion
Vmware Fusion Pro
7.2
CVSSv2
CVE-2016-7461
The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x prior to 12.5.2 and VMware Workstation Player 12.x prior to 12.5.2 and VMware Fusion and Fusion Pro 8.x prior to 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (...
Vmware Fusion Pro 8.1.1
Vmware Fusion Pro 8.5.0
Vmware Fusion 8.5.0
Vmware Fusion 8.5.1
Vmware Workstation Pro 12.0.0
Vmware Workstation Player 12.0.1
Vmware Fusion Pro 8.0.2
Vmware Fusion Pro 8.1.0
Vmware Fusion 8.1.0
Vmware Fusion 8.1.1
Vmware Workstation Pro 12.0.1
Vmware Workstation Pro 12.1.1
Vmware Workstation Pro 12.1.0
Vmware Fusion Pro 8.5.1
Vmware Fusion 8.0.0
Vmware Workstation Player 12.5.0
Vmware Workstation Player 12.5.1
Vmware Workstation Player 12.1.1
Vmware Workstation Player 12.1.0
Vmware Fusion Pro 8.0.0
Vmware Fusion Pro 8.0.1
Vmware Fusion 8.0.1
6
CVSSv2
CVE-2017-4933
VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x prior to 12.5.8), and Fusion (8.x prior to 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a heap overflow via a specific set of VNC packets resulting in heap corruption. Succes...
Vmware Workstation Pro
Vmware Workstation Pro 14.0
Vmware Workstation Pro 14.1.0
Vmware Esxi 6.5
Vmware Fusion
4.6
CVSSv2
CVE-2021-22040
VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host...
Vmware Cloud Foundation
Vmware Fusion
Vmware Workstation Player
Vmware Workstation Pro
Vmware Esxi 6.5
Vmware Esxi 6.7
Vmware Esxi 7.0
4.4
CVSSv2
CVE-2016-5330
Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 up to and including 6.0, VMware Workstation Pro 12.1.x prior to 12.1.1, VMware Workstation Player 12.1.x prior to 12.1.1, and VMware Fusion 8.1.x prior to 8.1.1 ...
Vmware Workstation Player
Vmware Workstation Pro
Vmware Esxi
Vmware Fusion
Vmware Tools
1 EDB exploit
3.5
CVSSv2
CVE-2018-6957
VMware Workstation (14.x prior to 14.1.1, 12.x) and Fusion (10.x prior to 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must...
Vmware Workstation Pro 12.1.1
Vmware Workstation Pro 12.5
Vmware Workstation Pro 12.5.1
Vmware Workstation Pro 12.5.2
Vmware Workstation Pro 12.5.7
Vmware Workstation Pro
Vmware Workstation Pro 12.01
Vmware Workstation Pro 12.5.4
Vmware Workstation Pro 12.5.6
Vmware Workstation Pro 12.0
Vmware Workstation Pro 12.1
Vmware Workstation Pro 12.5.3
Vmware Workstation Pro 12.5.5
Vmware Workstation Player 12.5.1
Vmware Workstation Player 12.5.2
Vmware Workstation Player 12.5.3
Vmware Workstation Player 12.5.4
Vmware Workstation Player 12.5.5
Vmware Workstation Player 12.0
Vmware Workstation Player 12.0.1
Vmware Workstation Player 12.1.1
Vmware Workstation Player 12.5.6
2.1
CVSSv2
CVE-2017-4925
VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x prior to 12.5.3), Fusion (8.x prior to 8.5.4) contain a NULL pointer dereference vulnerability. This issue occurs when h...
Vmware Esxi 5.5
Vmware Esxi 6.0
Vmware Esxi 6.5
Vmware Workstation
Vmware Workstation Pro
Vmware Fusion
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4654
CVE-2023-49606
encryption
NULL pointer dereference
CVE-2024-4439
CVE-2024-4649
race condition
CVE-2024-27202
CVE-2024-34566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »