VMWare Workstation

• CVE-2025-22224 Critical 9.3 Exploited VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machin 1.6%
• CVE-2026-41703 High 7.6 Out-of-bounds read vulnerability 0.4%
• CVE-2026-22717 Low 2.7 VMware Workstation out-of-bound read vulnerability 0.2%
• CVE-2026-22716 Medium 5.0 VMware Workstation out-of-bounds write vulnerability 0.2%
• CVE-2026-22722 Medium 6.1 VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash 0.2%
• CVE-2026-22715 Medium 5.9 VMware Workstation/Fusion NAT vulnerability 0.2%
• CVE-2025-41239 High 7.1 vSockets information-disclosure vulnerability 3.2%
• CVE-2025-41238 Critical 9.3 PVSCSI heap-overflow vulnerability 0.5%
• CVE-2025-41237 Critical 9.3 VMCI integer-underflow vulnerability 0.5%
• CVE-2025-41236 Critical 9.3 VMXNET3 integer-overflow vulnerability 2.6%
• CVE-2025-41227 Medium 5.5 Denial-of-Service Vulnerability 0.2%
• CVE-2023-34044 High 7.1 Information disclosure vulnerability in bluetooth device-sharing functionality 0.2%
• CVE-2020-3971 Unrated VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow vulnerability in the vmxnet 0.3%
• CVE-2020-3965 Unrated VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an inf 0.6%
• CVE-2020-3964 Unrated VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an inf 0.5%
• CVE-2020-3963 Unrated VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a use- 0.5%
• CVE-2020-3966 Unrated VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a heap 0.4%
• CVE-2020-3968 Unrated VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out 0.6%
• CVE-2020-3967 Unrated VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a heap 0.5%
• CVE-2020-3970 Unrated VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out 0.4%
• CVE-2020-3962 Unrated VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a use- 0.6%
• CVE-2020-3969 Unrated VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an off 0.5%
• CVE-2020-3947 Unrated VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp. Successful exploitation of this issue may lead to code execution on the host fro 0.6%
• CVE-2020-3948 Unrated Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vulnerability due to improper file permissions in Cortado Thinpr 0.3%