Advisories · Technology

VMware Fusion.

Every CVE that names VMware Fusion among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-59347 CVE record

CVSS 8.1 High

VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability
- VMware Workstation
- VMware Fusion
- Memory corruption
Not analysed yet 7 Oct 2026
CVE-2026-59346 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability
- VMware Workstation
- VMware Fusion
- Memory corruption
Not analysed yet 7 Oct 2026
CVE-2026-41703 CVE record

CVSS 7.6 High

Out-of-bounds read vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Memory corruption
Not analysed yet 30 Jul 2026
CVE-2026-41702 CVE record

CVSS 7.8 High

TOCTOU local privilege escalation vulnerability
- VMware Fusion
- Race condition
Not analysed yet 15 May 2026
CVE-2026-22715 CVE record

CVSS 5.9 Medium

VMware Workstation/Fusion NAT vulnerability
- VMware Workstation
- VMware Fusion
- CWE-923
Not analysed yet 26 Feb 2026
CVE-2025-41239 CVE record

CVSS 7.1 High

vSockets information-disclosure vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
Not analysed yet 15 Jul 2025
CVE-2025-41238 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

PVSCSI heap-overflow vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
Not analysed yet 15 Jul 2025
CVE-2025-41237 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

VMCI integer-underflow vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Memory corruption
Not analysed yet 15 Jul 2025
CVE-2025-41236 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

VMXNET3 integer-overflow vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
Not analysed yet 15 Jul 2025
CVE-2025-41227 CVE record

CVSS 5.5 Medium

Denial-of-Service Vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Denial of service
Not analysed yet 20 May 2025
CVE-2025-22226 CVE record

CVSS 7.1 HighCritical · KEVKEV

Out-of-bounds read in ESXi and others
- ESXi
- VMware Workstation
- Memory corruption
Not analysed yet 4 Mar 2025
CVE-2024-22273 CVE record

CVSS 8.1 High

Out-of-bounds read in VMware ESXi and others
- VMware ESXi
- VMware Workstation
- Memory corruption
Not analysed yet 21 May 2024
CVE-2024-22270 CVE record

CVSS 7.1 High

Information disclosure in VMware Workstation and others
- VMware Workstation
- VMware Fusion
- Information disclosure
Not analysed yet 14 May 2024
CVE-2024-22269 CVE record

CVSS 7.1 High

Information disclosure in VMware Workstation and others
- VMware Workstation
- VMware Fusion
- Information disclosure
Not analysed yet 14 May 2024
CVE-2024-22268 CVE record

CVSS 7.1 High

Out-of-bounds write in VMware Workstation and others
- VMware Workstation
- VMware Fusion
- Memory corruption
Not analysed yet 14 May 2024
CVE-2024-22267 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Use after free in VMware Workstation and others
- VMware Workstation
- VMware Fusion
- Memory corruption
Not analysed yet 14 May 2024
CVE-2024-22255 CVE record

CVSS 7.1 High

Information disclosure vulnerability
- VMware ESXi
- VMware Workstation
- Denial of service
Not analysed yet 5 Mar 2024
CVE-2024-22253 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Use-after-free vulnerability
- VMware ESXi
- VMware Workstation
- Memory corruption
Not analysed yet 5 Mar 2024
CVE-2024-22252 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Use-after-free vulnerability
- VMware ESXi
- VMware Workstation
- Memory corruption
Not analysed yet 5 Mar 2024
CVE-2024-22251 CVE record

CVSS 5.9 Medium

Out-of-bounds read vulnerability
- VMware Workstation
- VMware Fusion
- Memory corruption
Not analysed yet 27 Feb 2024
CVE-2023-34045 CVE record

CVSS 6.6 Medium

VMware Fusion installer local privilege escalation
- VMware Fusion
- Privilege escalation
Not analysed yet 20 Oct 2023
CVE-2023-34046 CVE record

CVSS 6.7 Medium

VMware Fusion TOCTOU local privilege escalation vulnerability
- VMware Fusion
- Race condition
Not analysed yet 20 Oct 2023
CVE-2023-34044 CVE record

CVSS 7.1 High

Information disclosure vulnerability in bluetooth device-sharing functionality
- VMware Workstation
- VMware Fusion
Not analysed yet 20 Oct 2023
CVE-2023-20871 CVE record

CVSS 7.8 High

Incorrect authorization in VMware Fusion
- VMware Fusion
- Broken access control
Not analysed yet 25 Apr 2023
CVE-2020-3980 CVE record

VMware Fusion: VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it…
- VMware Fusion
Not analysed yet 16 Sept 2020
CVE-2020-3971 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG)…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3965 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3964 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3963 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3966 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3968 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3967 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3970 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3962 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 24 Jun 2020
CVE-2020-3969 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 24 Jun 2020
CVE-2020-3959 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG)…
- VMware ESXi
- VMware Workstation
Not analysed yet 29 May 2020
CVE-2020-3958 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG)…
- VMware ESXi
- VMware Workstation
Not analysed yet 29 May 2020
CVE-2020-3957 CVE record

VMware Fusion: VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and…
- VMware Fusion
- VMware Remote Console for Mac
Not analysed yet 29 May 2020
CVE-2020-3947 CVE record

VMware Workstation: VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a…
- VMware Workstation
- VMware Fusion
Not analysed yet 16 Mar 2020
CVE-2020-3948 CVE record

VMware Workstation: Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x…
- VMware Workstation
- VMware Fusion
Not analysed yet 16 Mar 2020
CVE-2019-5521 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001)…
- VMware ESXi
- VMware Workstation
Not analysed yet 20 Sept 2019
CVE-2019-5517 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001)…
- VMware ESXi
- VMware Workstation
Not analysed yet 15 Apr 2019
CVE-2019-5520 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001)…
- VMware ESXi
- VMware Workstation
Not analysed yet 15 Apr 2019
CVE-2019-5516 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001)…
- VMware ESXi
- VMware Workstation
Not analysed yet 15 Apr 2019
CVE-2019-5514 CVE record

VMware Fusion: VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to…
- VMware Fusion
Not analysed yet 1 Apr 2019
CVE-2018-6974 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG…
- VMware ESXi
- VMware Workstation
Not analysed yet 16 Oct 2018
CVE-2018-6977 CVE record

VMware ESXi: VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x)…
- VMware ESXi
- VMware Workstation
Not analysed yet 9 Oct 2018
CVE-2018-6973 CVE record

VMware Workstation: VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an…
- VMware Workstation
- VMware Fusion
Not analysed yet 15 Aug 2018
CVE-2018-6972 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jul 2018
CVE-2018-6963 CVE record

VMware Workstation: VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple…
- VMware Workstation
- VMware Fusion
Not analysed yet 22 May 2018
CVE-2018-6962 CVE record

VMware Fusion: VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may…
- VMware Fusion
Not analysed yet 22 May 2018
CVE-2018-6957 CVE record

VMware Workstation: VMware Workstation (14.x before 14.1.1…
- VMware Workstation
- VMware Fusion
Not analysed yet 15 Mar 2018
CVE-2017-4950 CVE record

VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled.
- VMware Workstation Pro / Player
- VMware Fusion
Not analysed yet 11 Jan 2018
CVE-2017-4949 CVE record

VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled.
- VMware Workstation Pro / Player
- VMware Fusion
Not analysed yet 11 Jan 2018
CVE-2017-4945 CVE record

VMware Workstation: VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access…
- VMware Workstation
- VMware Fusion
Not analysed yet 5 Jan 2018
CVE-2017-4941 CVE record

VMware ESXi: VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG)…
- VMware ESXi
- VMware Workstation
Not analysed yet 20 Dec 2017
CVE-2017-4933 CVE record

VMware ESXi: VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8)…
- VMware ESXi
- VMware Workstation
Not analysed yet 20 Dec 2017
CVE-2017-4938 CVE record

VMware Workstation: VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC…
- VMware Workstation
- VMware Fusion
Not analysed yet 17 Nov 2017
CVE-2017-4934 CVE record

VMware Workstation: VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap…
- VMware Workstation
- VMware Fusion
Not analysed yet 17 Nov 2017
CVE-2017-4925 CVE record

VMware ESXi: VMware ESXi 6.5 without patch ESXi650-201707101-SG…
- VMware ESXi
- VMware Workstation
Not analysed yet 15 Sept 2017