Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductWorkstation Player (d4a419be-f897-595a-ae08-e2d801fa3946)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22040 vulnerable 2026-06-08 05:29:59.666255 Details available
VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Published: 2022-02-16T16:37:53.000Z
Updated: 2024-08-03T18:30:24.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3990 vulnerable 2026-06-08 05:25:58.581438 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.
Published: 2020-09-16T16:17:17.000Z
Updated: 2024-08-04T07:52:20.351Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3989 vulnerable 2026-06-08 05:25:58.580955 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to create a partial denial-of-service condition on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.
Published: 2020-09-16T16:17:11.000Z
Updated: 2024-08-04T07:52:20.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3988 vulnerable 2026-06-08 05:25:58.580522 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
Published: 2020-09-16T16:14:08.000Z
Updated: 2024-08-04T07:52:20.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3987 vulnerable 2026-06-08 05:25:58.580052 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
Published: 2020-09-16T16:14:01.000Z
Updated: 2024-08-04T07:52:20.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3986 vulnerable 2026-06-08 05:25:58.576459 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3982 vulnerable 2026-06-08 05:25:58.569547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6957 vulnerable 2026-06-08 05:11:54.510620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4905 vulnerable 2026-06-08 05:09:38.405191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4904 vulnerable 2026-06-08 05:09:38.404334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4903 vulnerable 2026-06-08 05:09:38.326896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4902 vulnerable 2026-06-08 05:09:38.317725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5330 vulnerable 2026-06-08 05:07:56.791831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.