VMware Workstation Pro / Player
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2017-4950 | 14.x before 14.1.1 ; 12.x before 12.5.9 | VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may lead | HIGH 7.0 | 0.4 % | ||
| CVE-2017-4949 | 14.x before 14.1.1 ; 12.x before 12.5.9 | VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a | HIGH 7.0 | 0.4 % | ||
| CVE-2017-4901 | 12.x prior to 12.5.4 | The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds m | CRITICAL 9.9 | 20 % | ||
| CVE-2017-4905 | 12.x prior to 12.5.5 | VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6. | MEDIUM 5.5 | 1.2 % | ||
| CVE-2017-4904 | 12.x prior to 12.5.5 | The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch E | HIGH 8.8 | 0.4 % | ||
| CVE-2017-4903 | 12.x prior to 12.5.5 | VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6. | HIGH 8.8 | 0.4 % | ||
| CVE-2017-4902 | 12.x prior to 12.5.5 | VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5 | HIGH 8.8 | 0.5 % | ||
| CVE-2017-4900 | 12.x prior to version 12.5.3 | VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successfu | MEDIUM 5.5 | 0.3 % | ||
| CVE-2017-4899 | 12.x prior to version 12.5.3 | VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit t | MEDIUM 4.7 | 0.3 % | ||
| CVE-2017-4898 | 12.x prior to version 12.5.3 | VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DL | HIGH 8.8 | 0.4 % | ||
| CVE-2017-4916 | All 12.x versions prior to version 12.5.6 | VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of | MEDIUM 6.5 | 5.0 % | ||
| CVE-2017-4915 | All 12.x versions prior to version 12.5.6 | VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful explo | HIGH 7.8 | 5.4 % |