VMware Fusion
42 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-41703 | 25H2 – < 26H1 | Out-of-bounds read vulnerability | HIGH 7.6 | 0.4 % | ||
| CVE-2026-41702 | 2025H2 – < 2026H1 | TOCTOU local privilege escalation vulnerability | HIGH 7.8 | 0.2 % | ||
| CVE-2026-22715 | 13.0 – < 25H2U1 | VMware Workstation/Fusion NAT vulnerability | MEDIUM 5.9 | 0.2 % | ||
| CVE-2025-41239 | 13.x – < 13.6.4 | vSockets information-disclosure vulnerability | HIGH 7.1 | 3.2 % | ||
| CVE-2025-41238 | 13.x – < 13.6.4 | PVSCSI heap-overflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41237 | 13.x – < 13.6.4 | VMCI integer-underflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41236 | 13.x – 13.6.4 | VMXNET3 integer-overflow vulnerability | CRITICAL 9.3 | 2.6 % | ||
| CVE-2025-41227 | | Denial-of-Service Vulnerability | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-34045 | 13.x – < 13.5 | VMware Fusion installer local privilege escalation | HIGH 7.8 | 0.2 % | ||
| CVE-2023-34046 | 13.x – < 13.5 | VMware Fusion TOCTOU local privilege escalation vulnerability | HIGH 7.0 | 0.1 % | ||
| CVE-2023-34044 | 13.x – < 13.5 | Information disclosure vulnerability in bluetooth device-sharing functionality | HIGH 7.1 | 0.2 % | ||
| CVE-2020-3971 | 11.x before 11.0.2 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before | MEDIUM 5.5 | 0.3 % | ||
| CVE-2020-3965 | 11.x before 11.5.2 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | MEDIUM 5.5 | 0.6 % | ||
| CVE-2020-3964 | 11.x before 11.5.2 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | MEDIUM 4.7 | 0.5 % | ||
| CVE-2020-3963 | 11.x before 11.5.2 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | MEDIUM 5.5 | 0.5 % | ||
| CVE-2020-3966 | 11.x before 11.5.2 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | HIGH 7.5 | 0.4 % | ||
| CVE-2020-3968 | 11.x before 11.5.5 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | HIGH 8.2 | 0.6 % | ||
| CVE-2020-3967 | 11.x before 11.5.5 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | HIGH 7.5 | 0.5 % | ||
| CVE-2020-3970 | 11.x before 11.5.5 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | LOW 3.8 | 0.4 % | ||
| CVE-2020-3962 | 11.x before 11.5.5 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | HIGH 8.2 | 0.6 % | ||
| CVE-2020-3969 | 11.x before 11.5.5 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | HIGH 7.8 | 0.5 % | ||
| CVE-2020-3947 | 11.x before 11.5.2 | VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp. Successful exploitat | HIGH 8.8 | 0.6 % | ||
| CVE-2020-3948 | 11.x before 11.5.2 | Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vuln | HIGH 7.8 | 0.3 % | ||
| CVE-2019-5517 | 11.x before 11.0.3 ; 10.x before 10.1.6 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus | MEDIUM 6.8 | 1.1 % | ||
| CVE-2019-5520 | 11.x before 11.0.3 ; 10.x before 10.1.6 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus | MEDIUM 5.9 | 1.0 % | ||
| CVE-2019-5516 | 11.x before 11.0.3 ; 10.x before 10.1.6 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus | MEDIUM 6.8 | 1.7 % | ||
| CVE-2018-6974 | 10.x before 10.1.3 | VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x befor | HIGH 8.8 | 0.5 % | ||
| CVE-2018-6977 | 11.x and 10.x | VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infi | MEDIUM 6.5 | 0.4 % | ||
| CVE-2018-6973 | 10.x before 10.1.3 | VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. Th | HIGH 8.8 | 0.5 % | ||
| CVE-2018-6972 | 10.x before 10.1.2 | VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806 | MEDIUM 6.5 | 3.0 % | ||
| CVE-2018-6963 | 10.x before 10.1.2 | VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to | MEDIUM 5.5 | 0.4 % | ||
| CVE-2018-6962 | 10.x before 10.1.2 | VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation. | HIGH 7.8 | 0.4 % | ||
| CVE-2018-6957 | 10.x before 10.1.1 ; 8.x | VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be | MEDIUM 5.3 | 1.6 % | ||
| CVE-2017-4950 | 10.x before 10.1.1 ; 8.x before 8.5.10 | VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may lead | HIGH 7.0 | 0.4 % | ||
| CVE-2017-4949 | 10.x before 10.1.1 ; 8.x before 8.5.10 | VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a | HIGH 7.0 | 0.4 % | ||
| CVE-2017-4945 | 10.x ; 8.x | VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue may allow program exec | MEDIUM 5.5 | 0.4 % | ||
| CVE-2017-4941 | 8.x before 8.5.9 | VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) con | HIGH 8.8 | 3.2 % | ||
| CVE-2017-4933 | 8.x before 8.5.9 | VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that | HIGH 8.8 | 3.6 % | ||
| CVE-2017-4938 | 8.x before 8.5.9 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful | MEDIUM 6.5 | 0.4 % | ||
| CVE-2017-4934 | 8.x before 8.5.9 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This iss | HIGH 8.8 | 0.4 % | ||
| CVE-2017-4925 | 8.x before 8.5.4 | VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG | MEDIUM 5.5 | 0.4 % | ||
| CVE-2017-4924 | 8.x before 8.5.8 | VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of- | HIGH 8.8 | 0.6 % |