GCVE - cpe:2.3:a:vmware:vmware_workstation:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vmware_workstation:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Vmware Workstation (`71e46831-ac89-53c1-8dea-aa16d007c12e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-22269`	vulnerable	2026-06-08 06:29:34.325741	Details available HIGH (7.1) VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine. Published: 2024-05-14T12:59:28.869Z Updated: 2024-08-01T22:43:33.677Z Open on db.gcve.eu Reference links https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-22253`	vulnerable	2026-06-08 06:29:34.266408	Use-after-free vulnerability CRITICAL (9.3) VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed. Published: 2024-03-05T17:57:27.297Z Updated: 2024-08-16T19:12:32.633Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2024-0006.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-22252`	vulnerable	2026-06-08 06:29:34.226982	Use-after-free vulnerability CRITICAL (9.3) VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed. Published: 2024-03-05T17:57:22.043Z Updated: 2025-03-27T19:50:25.416Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2024-0006.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3959`	vulnerable	2026-06-08 05:25:58.137817	Details available VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1.0) contain a memory leak vulnerability in the VMCI module. A malicious actor with local non-administrative access to a virtual machine may be able to crash the virtual machine's vmx process leading to a partial denial of service. Published: 2020-05-29T19:49:35.000Z Updated: 2024-08-04T07:52:20.401Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2020-0011.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3958`	vulnerable	2026-06-08 05:25:58.097397	Details available VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before 11.5.2) contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with non-administrative access to a virtual machine to crash the virtual machine's vmx process leading to a denial of service condition. Published: 2020-05-29T19:42:41.000Z Updated: 2024-08-04T07:52:20.563Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2020-0011.html https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0957	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5539`	vulnerable	2026-06-08 05:13:59.770946	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5525`	vulnerable	2026-06-08 05:13:59.589355	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5521`	vulnerable	2026-06-08 05:13:59.563473	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0177`	vulnerable	2026-06-08 04:51:08.064530	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.