CVE security advisories and vulnerability history for workstation by vmware.
Last updated
vmware workstation has 229 published CVE records since 2000, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 30 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.
This page aggregates every publicly disclosed vulnerability (CVE) affecting vmware workstation, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include 32 bit, 64 bit, ARM, Android, Linux, MacOS.
How the CVSS severity of vmware workstation's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
202 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
2
2 of vmware workstation's CVEs are confirmed exploited in the wild.
Public exploits
30
30 of vmware workstation's CVEs have a known public exploit available.
Browse every vmware workstation version named in a CVE, then pick one to see only the CVEs that affect it.
229 CVEs
Added to CISA KEV 2025-03-04
Added to CISA KEV 2025-03-04
Showing 30 of 229
The CWE weakness categories most often found in vmware workstation CVEs. Follow any weakness for its full explanation.
How many vmware workstation CVEs were published each year.
Browse vulnerabilities for other products by vmware.
Common questions about vmware workstation vulnerabilities.
vmware workstation has 229 published CVE records since 2000.
Yes — 2 of vmware workstation's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 30 of vmware workstation's CVEs have a known public exploit.
50 distinct vmware workstation versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
vmware workstation's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read), CWE-416 (Use After Free), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
vmware workstation has 6 critical and 12 high-severity CVEs.
The average CVSS base score across vmware workstation's scored CVEs is 7.3.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new vmware workstation vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
