workstation Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/workstation/ Sun, 26 Feb 2023 06:50:54 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png workstation Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/workstation/ 32 32 CVE-2018-6982 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6982/ Sun, 26 Feb 2023 06:50:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6982/ VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may lead to an information leak from host to guest.

The post CVE-2018-6982 appeared first on CVE Vulnerability.

]]> VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may lead to an information leak from host to guest.

The post CVE-2018-6982 appeared first on CVE Vulnerability.

]]> CVE-2018-6981 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6981/ Sun, 26 Feb 2023 06:50:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6981/ VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host.

The post CVE-2018-6981 appeared first on CVE Vulnerability.

]]> VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host.

The post CVE-2018-6981 appeared first on CVE Vulnerability.

]]> CVE-2018-6974 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6974/ Sun, 26 Feb 2023 06:50:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6974/ VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host.

The post CVE-2018-6974 appeared first on CVE Vulnerability.

]]> VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host.

The post CVE-2018-6974 appeared first on CVE Vulnerability.

]]> CVE-2018-6972 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6972/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6972/ VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

The post CVE-2018-6972 appeared first on CVE Vulnerability.

]]> VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

The post CVE-2018-6972 appeared first on CVE Vulnerability.

]]> CVE-2018-6967 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6967/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6967/ VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6966.

The post CVE-2018-6967 appeared first on CVE Vulnerability.

]]> VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6966.

The post CVE-2018-6967 appeared first on CVE Vulnerability.

]]> CVE-2018-6966 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6966/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6966/ VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6967.

The post CVE-2018-6966 appeared first on CVE Vulnerability.

]]> VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6967.

The post CVE-2018-6966 appeared first on CVE Vulnerability.

]]> CVE-2020-3963 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3963/ Sun, 26 Feb 2023 06:41:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3963/ VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a use-after-free vulnerability in PVNVRAM. A malicious actor with local access to a virtual machine may be able to read privileged information contained in physical memory.

The post CVE-2020-3963 appeared first on CVE Vulnerability.

]]> VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a use-after-free vulnerability in PVNVRAM. A malicious actor with local access to a virtual machine may be able to read privileged information contained in physical memory.

The post CVE-2020-3963 appeared first on CVE Vulnerability.

]]> CVE-2020-3965 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3965/ Sun, 26 Feb 2023 06:41:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3965/ VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the XHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.

The post CVE-2020-3965 appeared first on CVE Vulnerability.

]]> VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the XHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.

The post CVE-2020-3965 appeared first on CVE Vulnerability.

]]> CVE-2020-3964 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3964/ Sun, 26 Feb 2023 06:41:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3964/ VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the EHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in the hypervisor’s memory. Additional conditions beyond […]

The post CVE-2020-3964 appeared first on CVE Vulnerability.

]]> VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the EHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in the hypervisor’s memory. Additional conditions beyond the attacker’s control need to be present for exploitation to be possible.

The post CVE-2020-3964 appeared first on CVE Vulnerability.

]]> CVE-2019-5527 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5527/ Sun, 26 Feb 2023 06:33:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5527/ ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5.

The post CVE-2019-5527 appeared first on CVE Vulnerability.

]]> ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5.

The post CVE-2019-5527 appeared first on CVE Vulnerability.

]]>