vmware

950 tracked vulnerabilities.

CVE-2017-4950 HIGH
VMware Workstation and Fusion - Buffer Overflow
Jan 11, 2018
CVSS 7.0
EPSS 0.00
CVE-2017-4949 HIGH
VMware Workstation/Fusion - Use After Free
Jan 11, 2018
CVSS 7.0
EPSS 0.00
CVE-2017-4948 HIGH
VMware Workstation <14.1.0 and 12.x - Info Disclosure
Jan 05, 2018
CVSS 7.1
EPSS 0.00
CVE-2017-4946 HIGH
VMware V4H & V4PA <6.5.1 - Privilege Escalation
Jan 05, 2018
CVSS 7.8
EPSS 0.00
CVE-2017-4945 MEDIUM
VMware Workstation/Fusion <14.x,12.x;10.x,8.x - RCE
Jan 05, 2018
CVSS 5.5
EPSS 0.00
CVE-2017-5753 MEDIUM
Intel Atom - Information Disclosure via Speculative Execution Side-Channel
Jan 04, 2018
CVSS 5.6
EPSS 0.94
CVE-2017-8046 CRITICAL NUCLEI
Spring Data REST < 2.6.9 and Spring Boot < 1.5.9 - Remote Code Execution via Malicious PATCH Request
Jan 04, 2018
CVSS 9.8
EPSS 0.94
CVE-2017-4943 HIGH
VMware vCenter Server Appliance (vCSA) - Privilege Escalation
Dec 20, 2017
CVSS 7.8
EPSS 0.00
CVE-2017-4941 HIGH
VMware Fusion 8.0.0-8.5.8 & Workstation 12.0.0-12.5.7 - Remote Code Execution via VNC
Dec 20, 2017
CVSS 8.8
EPSS 0.05
CVE-2017-4940 MEDIUM
VMware ESXi - Stored Cross-Site Scripting in Host Client
Dec 20, 2017
CVSS 6.1
EPSS 0.00
CVE-2017-4933 HIGH
VMware ESXi <6.5-12.x <12.5.8-8.x <8.5.9 - RCE
Dec 20, 2017
CVSS 8.8
EPSS 0.07
CVE-2017-4942 MEDIUM
VMware AirWatch Console - Info Disclosure
Dec 13, 2017
CVSS 4.9
EPSS 0.00
CVE-2017-4920 MEDIUM
VMware NSX-V Edge <6.2.8-6.3.3 - DoS
Dec 05, 2017
CVSS 5.9
EPSS 0.00
CVE-2017-8044 MEDIUM
Single Sign-On for PCF 1.3.x < 1.3.4 and 1.4.x < 1.4.3 - Cross-Site Scripting via Query Parameters
Nov 27, 2017
CVSS 6.1
EPSS 0.00
CVE-2017-4995 HIGH
Pivotal Spring Security <4.2.3-5.0.0 - Code Injection
Nov 27, 2017
CVSS 8.1
EPSS 0.01
CVE-2017-16544 HIGH
VMware ESXi - Remote Code Execution via BusyBox Tab Autocomplete
Nov 20, 2017
CVSS 8.8
EPSS 0.03
CVE-2017-4939 HIGH
VMware Workstation 12.x < 12.5.8 - DLL Hijacking via Improper DLL Loading
Nov 17, 2017
CVSS 7.8
EPSS 0.00
CVE-2017-4938 MEDIUM
VMware Workstation/Fusion <12.5.8-8.5.9 - Use After Free
Nov 17, 2017
CVSS 6.5
EPSS 0.00
CVE-2017-4937 HIGH
VMware Workstation 12.x < 12.5.8 and Horizon View Client for Windows 4.x < 4.6.1 - Out-of-bounds Read in JPEG2000 Parser
Nov 17, 2017
CVSS 7.8
EPSS 0.00
CVE-2017-4936 HIGH
VMware Workstation <12.5.8 - Memory Corruption
Nov 17, 2017
CVSS 7.8
EPSS 0.00
CVE-2017-4935 HIGH
VMware Workstation <12.5.8 - Buffer Overflow
Nov 17, 2017
CVSS 7.8
EPSS 0.00
CVE-2017-4934 HIGH
VMware Workstation/Fusion <12.5.8/<8.5.9 - Buffer Overflow
Nov 17, 2017
CVSS 8.8
EPSS 0.00
CVE-2017-4929 MEDIUM
VMware NSX Edge <6.2.9, <6.3.5 - XSS
Nov 17, 2017
CVSS 6.1
EPSS 0.00
CVE-2017-4928 HIGH
VMware vCenter Server < 6.0 U3c - Server-Side Request Forgery and CRLF Injection via Flash-based vSphere Web Client
Nov 17, 2017
CVSS 7.5
EPSS 0.00
CVE-2017-4927 HIGH
VMware vCenter Server <6.5 U1, <6.0 U3c - DoS
Nov 17, 2017
CVSS 7.5
EPSS 0.01
Products
workstation 213 esxi 139 cloud_foundation 132 fusion 131 player 89 esx 86 vcenter_server 79 server 58 spring_framework 48 ace 44 identity_manager 28 workstation_pro 27 workstation_player 26 horizon_client 25 spring_security 24 Workstation 23 tools 22 vrealize_suite_lifecycle_manager 21 vrealize_automation 20 spring_boot 18 vrealize_operations 18 ESXi 16 vmware_workstation 15 vrealize_log_insight 15 workspace_one_access 15 horizon_view 14 spring_ai 14 vcenter_server_appliance 14 Fusion 13 aria_operations 13
Quick Filters
Critical CVEs With Exploits In CISA KEV