VMware Workstation vulnerabilities
We track 5 vulnerabilities in VMware Workstation products. 4 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on March 4, 2025.
Latest VMware Workstation vulnerabilities
- 6.0 Medium severity
VMware ESXi, Workstation, and Fusion Information Disclosure Exploited
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx proce
- 7.8 High severity
VMware ESXi: Out-of-bounds Read
The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or e
- 8.2 High severity
VMware Workstation: Use After Free
VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on th
- 7.1 High severity
VMware ESXi: Allocation of Resources Without Limits or Throttling
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
- 8.4 High severity
VMware Workstation: Improper Privilege Management
VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is inst