Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductWorkstation Pro (0a57f574-4cd9-5fa5-8535-8869ef0331d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22040 vulnerable 2026-06-08 05:29:59.666777 Details available
VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Published: 2022-02-16T16:37:53.000Z
Updated: 2024-08-03T18:30:24.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3990 vulnerable 2026-06-08 05:25:58.581461 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.
Published: 2020-09-16T16:17:17.000Z
Updated: 2024-08-04T07:52:20.351Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3989 vulnerable 2026-06-08 05:25:58.580978 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to create a partial denial-of-service condition on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.
Published: 2020-09-16T16:17:11.000Z
Updated: 2024-08-04T07:52:20.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3988 vulnerable 2026-06-08 05:25:58.580547 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
Published: 2020-09-16T16:14:08.000Z
Updated: 2024-08-04T07:52:20.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3987 vulnerable 2026-06-08 05:25:58.580076 Details available
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
Published: 2020-09-16T16:14:01.000Z
Updated: 2024-08-04T07:52:20.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3986 vulnerable 2026-06-08 05:25:58.579443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6957 vulnerable 2026-06-08 05:11:54.499070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4933 vulnerable 2026-06-08 05:09:38.515534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4925 vulnerable 2026-06-08 05:09:38.482215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4924 vulnerable 2026-06-08 05:09:38.468738 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4905 vulnerable 2026-06-08 05:09:38.405208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4904 vulnerable 2026-06-08 05:09:38.404352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4903 vulnerable 2026-06-08 05:09:38.326915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4902 vulnerable 2026-06-08 05:09:38.318321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5330 vulnerable 2026-06-08 05:07:56.792409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.