VW
Product
VMware Workstation
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch
Add VMware Workstation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-22226 In wildKEV | 6.0 | Mar 4 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Affected: 17.x before 17.6.3 |
| CVE-2024-22267 | 8.2 | May 14 | VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may… Affected: 17.x before 17.5.2 |
| CVE-2024-22273 | 7.8 | May 21 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage… Affected: 17.x before 17.5.1 |
| CVE-2024-22268 | 6.5 | May 14 | VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with… Affected: 17.x before 17.5.2 |
| CVE-2024-22270 | 6.0 | May 14 | VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality. A malicious actor with local administrative… Affected: 17.x before 17.5.2 |
| CVE-2024-22269 | 6.0 | May 14 | VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine… Affected: 17.x before 17.5.2 |
| CVE-2022-22983 | 5.9 | Aug 9 | VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability Affected: VMware Workstation (16.x prior to 16.2.4) |
Showing 7
