VMware Workstation
51 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-41703 | 25H2 – < 26H1 | Out-of-bounds read vulnerability | HIGH 7.6 | 0.4 % | ||
| CVE-2026-22717 | 25H2 – < 25H1U1 | VMware Workstation out-of-bound read vulnerability | LOW 2.7 | 0.2 % | ||
| CVE-2026-22716 | 25H2 – < 25H2U1 | VMware Workstation out-of-bounds write vulnerability | MEDIUM 5.0 | 0.2 % | ||
| CVE-2026-22722 | 17.0 – < 25H2u1 | VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-22715 | 17.0 – < 25H2U1 | VMware Workstation/Fusion NAT vulnerability | MEDIUM 5.9 | 0.2 % | ||
| CVE-2025-41239 | 17.x – < 17.6.4 | vSockets information-disclosure vulnerability | HIGH 7.1 | 3.2 % | ||
| CVE-2025-41238 | 17.x – < 17.6.4 | PVSCSI heap-overflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41237 | 17.x – < 17.6.4 | VMCI integer-underflow vulnerability | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-41236 | 17.x – < 17.6.4 | VMXNET3 integer-overflow vulnerability | CRITICAL 9.3 | 2.6 % | ||
| CVE-2025-41227 | 17.x – < 17.6.3 | Denial-of-Service Vulnerability | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-22224 | 17.x – < 17.6.3 | VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious ac | CRITICAL 9.3 | 1.6 % | KEV | |
| CVE-2023-34044 | 17.x – < 17.5 | Information disclosure vulnerability in bluetooth device-sharing functionality | HIGH 7.1 | 0.2 % | ||
| CVE-2020-3971 | 15.x before 15.0.2 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before | MEDIUM 5.5 | 0.3 % | ||
| CVE-2020-3965 | 15.x before 15.5.2 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | MEDIUM 5.5 | 0.6 % | ||
| CVE-2020-3964 | 15.x before 15.5.2 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | MEDIUM 4.7 | 0.5 % | ||
| CVE-2020-3963 | 15.x before 15.5.2 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | MEDIUM 5.5 | 0.5 % | ||
| CVE-2020-3966 | 15.x before 15.5.2 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | HIGH 7.5 | 0.4 % | ||
| CVE-2020-3968 | 15.x before 15.5.5 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | HIGH 8.2 | 0.6 % | ||
| CVE-2020-3967 | 15.x before 15.5.5 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | HIGH 7.5 | 0.5 % | ||
| CVE-2020-3970 | 15.x before 15.5.5 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | LOW 3.8 | 0.4 % | ||
| CVE-2020-3962 | 15.x before 15.5.5 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | HIGH 8.2 | 0.6 % | ||
| CVE-2020-3969 | 15.x before 15.5.5 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be | HIGH 7.8 | 0.5 % | ||
| CVE-2020-3947 | 15.x before 15.5.2 | VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp. Successful exploitat | HIGH 8.8 | 0.6 % | ||
| CVE-2020-3948 | 15.x before 15.5.2 | Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vuln | HIGH 7.8 | 0.3 % | ||
| CVE-2019-5517 | 15.x before 15.0.3 ; 14.x before 14.1.6 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus | MEDIUM 6.8 | 1.1 % | ||
| CVE-2019-5520 | 15.x before 15.0.3 ; 14.x before 14.1.6 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus | MEDIUM 5.9 | 1.0 % | ||
| CVE-2019-5516 | 15.x before 15.0.3 ; 14.x before 14.1.6 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fus | MEDIUM 6.8 | 1.7 % | ||
| CVE-2018-6974 | 14.x before 14.1.3 | VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x befor | HIGH 8.8 | 0.5 % | ||
| CVE-2018-6977 | 15.x and 14.x | VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infi | MEDIUM 6.5 | 0.4 % | ||
| CVE-2018-6973 | 14.x before 14.1.3 | VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. Th | HIGH 8.8 | 0.5 % | ||
| CVE-2018-6972 | 14.x before 14.1.2 | VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806 | MEDIUM 6.5 | 3.0 % | ||
| CVE-2018-6963 | 14.x before 14.1.2 | VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to | MEDIUM 5.5 | 0.4 % | ||
| CVE-2018-6957 | 14.x before 14.1.1 ; 12.x | VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be | MEDIUM 5.3 | 1.6 % | ||
| CVE-2017-4948 | 14.x before 14.1.0 ; 12.x | VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in T | HIGH 7.1 | 0.4 % | ||
| CVE-2017-4945 | 14.x ; 12.x | VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue may allow program exec | MEDIUM 5.5 | 0.4 % | ||
| CVE-2017-4941 | 12.x before 12.5.8 | VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) con | HIGH 8.8 | 3.2 % | ||
| CVE-2017-4933 | 12.x before 12.5.8 | VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that | HIGH 8.8 | 3.6 % | ||
| CVE-2017-4939 | 12.x before 12.5.8 | VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application | HIGH 7.8 | 1.3 % | ||
| CVE-2017-4938 | 12.x before 12.5.8 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful | MEDIUM 6.5 | 0.4 % | ||
| CVE-2017-4937 | 12.x before 12.5.8 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability i | HIGH 7.8 | 0.4 % | ||
| CVE-2017-4936 | 12.x before 12.5.8 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability i | HIGH 7.8 | 0.4 % | ||
| CVE-2017-4935 | 12.x before 12.5.8 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2017-4934 | 12.x before 12.5.8 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This iss | HIGH 8.8 | 0.4 % | ||
| CVE-2017-4925 | 12.x before 12.5.3 | VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG | MEDIUM 5.5 | 0.4 % | ||
| CVE-2017-4924 | 12.x before 12.5.7 | VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of- | HIGH 8.8 | 0.6 % | ||
| CVE-2017-4913 | 12.x prior to 12.5.3 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulnerability in the True | HIGH 7.8 | 0.4 % | ||
| CVE-2017-4912 | 12.x prior to 12.5.3 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities i | HIGH 7.8 | 0.4 % | ||
| CVE-2017-4911 | 12.x prior to 12.5.3 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds write vulnerabilities | HIGH 7.8 | 0.4 % | ||
| CVE-2017-4910 | 12.x prior to 12.5.3 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities i | HIGH 7.8 | 0.4 % | ||
| CVE-2017-4909 | 12.x prior to 12.5.3 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in TrueT | HIGH 7.8 | 0.4 % | ||
| CVE-2017-4908 | 12.x prior to 12.5.3 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities | HIGH 7.8 | 0.4 % |