VMware Fusion
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-22226 | 13.x – < 13.6.3 | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor | HIGH 7.1 | 1.6 % | KEV | |
| CVE-2024-22273 | 13.x – < 13.5.1 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access t | HIGH 8.1 | 0.2 % | ||
| CVE-2024-22270 | 13.x – < 13.5.2 | VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality. A malicio | HIGH 7.1 | 0.5 % | ||
| CVE-2024-22269 | 13.x – < 13.5.2 | VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local adminis | HIGH 7.1 | 0.5 % | ||
| CVE-2024-22268 | 13.x – < 13.5.2 | VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administr | HIGH 7.1 | 0.5 % | ||
| CVE-2024-22267 | 13.x – < 13.5.2 | VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative p | CRITICAL 9.3 | 0.7 % | ||
| CVE-2024-22255 | 13.x – < 13.5.1 | Information disclosure vulnerability | HIGH 7.1 | 2.3 % | ||
| CVE-2024-22253 | 13.x – < 13.5.1 | Use-after-free vulnerability | CRITICAL 9.3 | 0.6 % | ||
| CVE-2024-22252 | 13.x – < 13.5.1 | Use-after-free vulnerability | CRITICAL 9.3 | 3.5 % | ||
| CVE-2024-22251 | 13.x – < 13.5.1 | Out-of-bounds read vulnerability | MEDIUM 5.9 | 0.2 % | ||
| CVE-2023-20871 | VMware Fusion (13.x) | VMware Fusion contains a local privilege escalation vulnerability. A malicious actor with read/write access to the host operating system can | HIGH 7.8 | 0.4 % | ||
| CVE-2020-3980 | VMware Fusion (11.x) | VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker wi | MEDIUM 6.7 | 0.3 % |