Esxi (Vmware) - vulnerabilities (CVEs)

116 CVEs, 0 in the last 30 days, 538 known versions, newest CVE from 2025-07-15. Vendor: Vmware.

CVEs of Esxi

• CVE-2025-41237 - CVSS 9.3 (critical), 2025-07-15: VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI (Virtual Machine Communication Interface) that leads to an out-of-bounds write. A…
• CVE-2025-41239 - CVSS 7.1 (high), 2025-07-15: VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A…
• CVE-2025-41238 - CVSS 9.3 (critical), 2025-07-15: VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI) controller that leads to an out of-bounds…
• CVE-2025-41236 - CVSS 9.3 (critical), 2025-07-15: VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local…
• CVE-2025-41227 - CVSS 5.5 (medium), 2025-05-20: VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative…
• CVE-2025-41226 - CVSS 6.8 (medium), 2025-05-20: VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor with guest operation privileges on a…
• CVE-2025-41228 - CVSS 4.3 (medium), 2025-05-20: VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access…
• CVE-2025-22225 - CVSS 8.2 (high), 2025-03-04: VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading…
• CVE-2025-22224 - CVSS 9.3 (critical), 2025-03-04: VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local…
• CVE-2025-22226 - CVSS 7.1 (high), 2025-03-04: VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with…
• CVE-2024-37086 - CVSS 6.8 (medium), 2024-06-25: VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing…
• CVE-2024-37085 - CVSS 7.2 (high), 2024-06-25: VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an…
• CVE-2024-22273 - CVSS 8.1 (high), 2024-05-21: The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual…
• CVE-2024-22255 - CVSS 7.1 (high), 2024-03-05: VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access…
• CVE-2024-22254 - CVSS 8.2 (high), 2024-03-05: VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading…
• CVE-2024-22253 - CVSS 9.3 (critical), 2024-03-05: VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges…
• CVE-2024-22252 - CVSS 9.3 (critical), 2024-03-05: VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges…
• CVE-2023-29552 - CVSS 7.5 (high), 2023-04-25: The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use…
• CVE-2022-31705 - CVSS 8.2 (high), 2022-12-14: VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local…
• CVE-2022-31699 - CVSS 3.3 (low), 2022-12-13: VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to…
• CVE-2022-31696 - CVSS 8.8 (high), 2022-12-13: VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may…
• CVE-2022-31681 - CVSS 6.5 (medium), 2022-10-07: VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service…
• CVE-2022-23825 - CVSS 6.5 (medium), 2022-07-14: Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.
• CVE-2022-29901 - CVSS 6.5 (medium), 2022-07-12: Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak…
• CVE-2022-21166 - CVSS 5.5 (medium), 2022-06-15: Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable…
• CVE-2022-21125 - CVSS 5.5 (medium), 2022-06-15: Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure…
• CVE-2022-21123 - CVSS 5.5 (medium), 2022-06-15: Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via…
• CVE-2021-22040 - CVSS 6.7 (medium), 2022-02-16: VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges…
• CVE-2021-22043 - CVSS 7.5 (high), 2022-02-16: VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled. A malicious actor with access to…
• CVE-2021-22042 - CVSS 7.8 (high), 2022-02-16: VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A malicious actor with privileges…
• CVE-2021-22041 - CVSS 6.7 (medium), 2022-02-16: VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges…
• CVE-2021-22050 - CVSS 7.5 (high), 2022-02-16: ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to ESXi may exploit this issue to create a…
• CVE-2021-22045 - CVSS 7.8 (high), 2022-01-04: VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a…
• CVE-2021-21995 - CVSS 7.5 (high), 2021-07-13: OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue. A malicious actor with network access to port 427 on ESXi…
• CVE-2021-21994 - CVSS 9.8 (critical), 2021-07-13: SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with network access to port 5989 on ESXi may…
• CVE-2021-21974 - CVSS 8.8 (high), 2021-02-24: OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability. A…
• CVE-2020-3999 - CVSS 6.5 (medium), 2020-12-21: VMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x prior to 15.5.7), VMware Fusion (12.x prior to 12.0 and 11.x…
• CVE-2020-4004 - CVSS 8.2 (high), 2020-11-20: VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstation (15.x before 15.5.7), Fusion (11.x…
• CVE-2020-4005 - CVSS 7.8 (high), 2020-11-20: VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalation vulnerability…
• CVE-2020-3995 - CVSS 5.3 (medium), 2020-10-20: In VMware ESXi (6.7 before ESXi670-201908101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x before 15.1.0), Fusion (11.x before 11.1.0), the VMCI…
• CVE-2020-3982 - CVSS 7.7 (high), 2020-10-20: VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before…
• CVE-2020-3981 - CVSS 5.8 (medium), 2020-10-20: VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before…
• CVE-2020-3992 - CVSS 9.8 (critical), 2020-10-20: OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free…
• CVE-2020-3976 - CVSS 5.3 (medium), 2020-08-21: VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the…
• CVE-2020-3967 - CVSS 7.5 (high), 2020-06-25: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and…
• CVE-2020-3971 - CVSS 5.5 (medium), 2020-06-25: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a…
• CVE-2020-3963 - CVSS 5.5 (medium), 2020-06-25: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and…
• CVE-2020-3966 - CVSS 7.5 (high), 2020-06-25: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and…
• CVE-2020-3970 - CVSS 3.8 (low), 2020-06-25: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and…
• CVE-2020-3965 - CVSS 5.5 (medium), 2020-06-25: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and…
• CVE-2020-3968 - CVSS 8.2 (high), 2020-06-25: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and…
• CVE-2020-3964 - CVSS 4.7 (medium), 2020-06-25: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and…
• CVE-2020-3962 - CVSS 8.2 (high), 2020-06-24: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and…
• CVE-2020-3969 - CVSS 7.8 (high), 2020-06-24: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and…
• CVE-2020-3959 - CVSS 3.3 (low), 2020-05-29: VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before…
• CVE-2020-3958 - CVSS 5.5 (medium), 2020-05-29: VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before…
• CVE-2020-3955 - CVSS 9.3 (critical), 2020-04-29: ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing…
• CVE-2019-5544 - CVSS 9.8 (critical), 2019-12-06: OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical…
• CVE-2019-5536 - CVSS 6.5 (medium), 2019-10-28: VMware ESXi (6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG), Workstation (15.x before 15.5.0) and Fusion (11.x before 11.5.0) contain a…
• CVE-2019-5527 - CVSS 8.8 (high), 2019-10-10: ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of…
• CVE-2019-5521 - CVSS 9.6 (critical), 2019-09-20: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x…
• CVE-2019-5531 - CVSS 5.4 (medium), 2019-09-18: VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMware vCenter Server…
• CVE-2019-5528 - CVSS 5.3 (medium), 2019-07-11: VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is available.
• CVE-2019-5517 - CVSS 6.8 (medium), 2019-04-15: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before…
• CVE-2019-5520 - CVSS 5.9 (medium), 2019-04-15: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before…
• CVE-2019-5516 - CVSS 6.8 (medium), 2019-04-15: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before…
• CVE-2019-5519 - CVSS 6.8 (medium), 2019-04-01: VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7),…
• CVE-2019-5518 - CVSS 6.8 (medium), 2019-04-01: VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7),…
• CVE-2018-6982 - CVSS 6.5 (medium), 2018-12-04: VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual…
• CVE-2018-6981 - CVSS 8.8 (high), 2018-12-04: VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware…
• CVE-2018-6974 - CVSS 8.8 (high), 2018-10-16: VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and…
• CVE-2018-6977 - CVSS 6.5 (medium), 2018-10-09: VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop in a…
• CVE-2018-6972 - CVSS 6.5 (medium), 2018-07-25: VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG),…
• CVE-2018-6965 - CVSS 8.1 (high), 2018-07-09: VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability…
• CVE-2018-6967 - CVSS 8.1 (high), 2018-07-09: VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability…
• CVE-2018-6966 - CVSS 8.1 (high), 2018-07-09: VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability…
• CVE-2017-5753 - CVSS 5.6 (medium), 2018-01-04: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local…
• CVE-2017-4933 - CVSS 8.8 (high), 2017-12-20: VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an…
• CVE-2017-4941 - CVSS 8.8 (high), 2017-12-20: VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a…
• CVE-2017-4940 - CVSS 6.1 (medium), 2017-12-20: The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a…
• CVE-2017-16544 - CVSS 8.8 (high), 2017-11-20: In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a…
• CVE-2017-4925 - CVSS 5.5 (medium), 2017-09-15: VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation…
• CVE-2017-4924 - CVSS 8.8 (high), 2017-09-15: VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of-bounds write…
• CVE-2017-4902 - CVSS 8.8 (high), 2017-06-07: VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro /…
• CVE-2017-4905 - CVSS 5.5 (medium), 2017-06-07: VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch…
• CVE-2017-4904 - CVSS 8.8 (high), 2017-06-07: The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch…
• CVE-2017-4903 - CVSS 8.8 (high), 2017-06-07: VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch…
• CVE-2016-7463 - CVSS 5.4 (medium), 2016-12-29: Cross-site scripting (XSS) vulnerability in the Host Client in VMware vSphere Hypervisor (aka ESXi) 5.5 and 6.0 allows remote authenticated users to inject…
• CVE-2016-5331 - CVSS 6.1 (medium), 2016-08-08: CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP…
• CVE-2016-5330 - CVSS 7.8 (high), 2016-08-08: Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro…
• CVE-2015-6933 - CVSS 6.3 (medium), 2016-01-09: The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before…
• CVE-2015-1044 - CVSS 3.3 (low), 2015-01-29: vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows…
• CVE-2014-8370 - CVSS 6.4 (medium), 2015-01-29: VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to…
• CVE-2014-4241 - CVSS 4.3 (medium), 2014-07-17: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect…
• CVE-2014-3793 - CVSS 5.8 (medium), 2014-05-31: VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a…
• CVE-2014-1207 - CVSS 4.3 (medium), 2014-01-17: VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepting and modifying…
• CVE-2014-1208 - CVSS 3.3 (low), 2014-01-17: VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1…
• CVE-2013-5973 - CVSS 4.4 (medium), 2013-12-23: VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource…
• CVE-2013-3519 - CVSS 7.9 (high), 2013-12-04: lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware…
• CVE-2013-5970 - CVSS 7.1 (high), 2013-10-21: hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to cause a denial of service (hostd-vmdb service outage) by…