Skip to content

Known vulnerabilities in VMware Fusion

Is your version affected?

CVE Summary Score Published
CVE-2026-41703 VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability 7.6 High Jul 30, 2026
CVE-2026-41702 VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a… 7.8 High May 15, 2026
CVE-2026-22715 VMWare Workstation and Fusion contain a logic flaw in the management of network packets.  Known attack vectors: A… 5.9 Medium Feb 26, 2026
CVE-2025-41239 VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage… 7.1 High Jul 15, 2025
CVE-2025-41238 VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI)… 9.3 Critical Jul 15, 2025
CVE-2025-41237 VMCI integer-underflow vulnerability 9.3 Critical Jul 15, 2025
CVE-2025-41236 VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A… 9.3 Critical Jul 15, 2025
CVE-2025-41227 VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious… 5.5 Medium May 20, 2025
CVE-2024-38811 VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment… 8.8 High Sep 3, 2024
CVE-2024-22273 The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious… 8.1 High May 21, 2024
CVE-2024-22270 VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS)… 7.1 High May 14, 2024
CVE-2024-22269 VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious… 7.1 High May 14, 2024
CVE-2024-22267 VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with… 9.3 Critical May 14, 2024
CVE-2024-22253 VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious… 9.3 Critical Mar 5, 2024
CVE-2024-22252 VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious… 9.3 Critical Mar 5, 2024
CVE-2023-34045 VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation… 6.6 Medium Oct 20, 2023
CVE-2023-34046 VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during… 6.7 Medium Oct 20, 2023
CVE-2023-34044 VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that… 7.1 High Oct 20, 2023
CVE-2020-3971 VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and… Not rated Jun 25, 2020
CVE-2020-3965 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before… Not rated Jun 25, 2020
CVE-2020-3964 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before… Not rated Jun 25, 2020
CVE-2020-3963 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before… Not rated Jun 25, 2020
CVE-2020-3966 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before… Not rated Jun 25, 2020
CVE-2020-3968 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before… Not rated Jun 25, 2020
CVE-2020-3967 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before… Not rated Jun 25, 2020

Other VMware products