CVE security advisories and vulnerability history for fusion by vmware.
138
Total CVEs
Published
2
In CISA KEV
Exploited in the wild
23
Public exploits
PoC or exploit code
7.2
Avg CVSS
2008–2026
Last updated
Overview
vmware fusion has 138 published CVE records since 2008, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 23 have a known public exploit. The average CVSS base score across scored CVEs is 7.2. Affected platforms include freebsd, macos, solaris, windows.
Severity and exploitation
How the CVSS severity of vmware fusion's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical13
High68
Medium52
Low5
In CISA’s Known Exploited Vulnerabilities catalog
2
2 of vmware fusion's CVEs are confirmed exploited in the wild.
Public exploits
23
23 of vmware fusion's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every vmware fusion version named in a CVE, then pick one to see only the CVEs that affect it.
Specific versions
10.x before 10.1.13 CVEs
10.x before 10.1.63 CVEs
11.x before 11.0.33 CVEs
8.x2 CVEs
8.x before 8.5.102 CVEs
10.x1 CVE
Version ranges
2.0 <= v <= 2.010 CVEs
2.0.1 <= v <= 2.0.19 CVEs
2.0.2 <= v <= 2.0.29 CVEs
6.0 <= v <= 6.09 CVEs
6.0.1 <= v <= 6.0.19 CVEs
Common weakness types
The CWE weakness categories most often found in vmware fusion CVEs. Follow any weakness for its full explanation.
Common questions about vmware fusion vulnerabilities.
How many CVEs does vmware fusion have?
vmware fusion has 138 published CVE records since 2008.
How many vmware fusion CVEs are in CISA KEV?
Yes — 2 of vmware fusion's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for vmware fusion vulnerabilities?
Yes — 23 of vmware fusion's CVEs have a known public exploit.
Which versions of vmware fusion are affected?
172 distinct vmware fusion versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in vmware fusion CVEs?
vmware fusion's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-416 (Use After Free).
How many critical vmware fusion vulnerabilities are there?
vmware fusion has 13 critical and 68 high-severity CVEs.
What is the average severity of vmware fusion CVEs?
The average CVSS base score across vmware fusion's scored CVEs is 7.2.
