VMware Workstation
15 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-22226 | 17.x – < 17.6.3 | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor | HIGH 7.1 | 1.6 % | KEV | |
| CVE-2024-22273 | 17.x – < 17.5.1 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access t | HIGH 8.1 | 0.2 % | ||
| CVE-2024-22270 | 17.x – < 17.5.2 | VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality. A malicio | HIGH 7.1 | 0.5 % | ||
| CVE-2024-22269 | 17.x – < 17.5.2 | VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local adminis | HIGH 7.1 | 0.5 % | ||
| CVE-2024-22268 | 17.x – < 17.5.2 | VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administr | HIGH 7.1 | 0.5 % | ||
| CVE-2024-22267 | 17.x – < 17.5.2 | VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative p | CRITICAL 9.3 | 0.7 % | ||
| CVE-2024-22255 | 17.x – < 17.5.1 | Information disclosure vulnerability | HIGH 7.1 | 2.3 % | ||
| CVE-2024-22253 | 17.x – < 17.5.1 | Use-after-free vulnerability | CRITICAL 9.3 | 0.6 % | ||
| CVE-2024-22252 | 17.x – < 17.5.1 | Use-after-free vulnerability | CRITICAL 9.3 | 3.5 % | ||
| CVE-2024-22251 | 17.x – < 17.5.1 | Out-of-bounds read vulnerability | MEDIUM 5.9 | 0.2 % | ||
| CVE-2023-20854 | VMware Workstation (17.x prior to 17.0.1) | VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine m | HIGH 8.4 | 0.3 % | ||
| CVE-2022-22983 | VMware Workstation (16.x prior to 16.2.4) | VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability. A malicious actor with local user pr | MEDIUM 5.9 | 0.3 % | ||
| CVE-2019-5526 | VMware Workstation (15.x before 15.1.0) | VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Succ | HIGH 7.8 | 8.5 % | ||
| CVE-2019-5512 | VMware Workstation 15.x prior to 15.0.3, 14.x before 14.1.6 | VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately. Successful exploit | HIGH 8.8 | 1.2 % | ||
| CVE-2019-5511 | VMware Workstation 15.x prior to 15.0.3, 14.x before 14.1.6 | VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Successful exploitation | HIGH 8.8 | 0.4 % |