https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-2077.htmlhttps://patchthecve.com/cve/CVE-2016-2077.htmlWed, 17 Jun 2026 00:43:23 +0000CRITICAL 9.8: VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges via unspecified vectors.https://patchthecve.com/cve/CVE-2015-6933.htmlhttps://patchthecve.com/cve/CVE-2015-6933.htmlWed, 17 Jun 2026 00:31:38 +0000MEDIUM 6.3: The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi 5.0 through 6.0 allows Windows guest OS users to gain guest OS privileges or cause a denial of service (guest OS kernel https://patchthecve.com/cve/CVE-2015-3650.htmlhttps://patchthecve.com/cve/CVE-2015-3650.htmlWed, 17 Jun 2026 00:26:02 +0000HIGH 7.2: vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x and 6.x before 6.0.7 and 7.x before 7.1.1, and VMware Horizon Client 5.x local-mode before 5.4.2 on Windows does not provide a valid DACL pointer during the setup of the vprintproxy.exe prochttps://patchthecve.com/cve/CVE-2015-2341.htmlhttps://patchthecve.com/cve/CVE-2015-2341.htmlWed, 17 Jun 2026 00:23:57 +0000HIGH 7.8: VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command.https://patchthecve.com/cve/CVE-2015-2340.htmlhttps://patchthecve.com/cve/CVE-2015-2340.htmlWed, 17 Jun 2026 00:23:57 +0000MEDIUM 6.1: TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause a hohttps://patchthecve.com/cve/CVE-2015-2339.htmlhttps://patchthecve.com/cve/CVE-2015-2339.htmlWed, 17 Jun 2026 00:23:57 +0000MEDIUM 6.1: TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause a hhttps://patchthecve.com/cve/CVE-2015-2338.htmlhttps://patchthecve.com/cve/CVE-2015-2338.htmlWed, 17 Jun 2026 00:23:57 +0000MEDIUM 6.1: TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause a hhttps://patchthecve.com/cve/CVE-2015-2337.htmlhttps://patchthecve.com/cve/CVE-2015-2337.htmlWed, 17 Jun 2026 00:23:57 +0000MEDIUM 5.8: TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute arhttps://patchthecve.com/cve/CVE-2015-2336.htmlhttps://patchthecve.com/cve/CVE-2015-2336.htmlWed, 17 Jun 2026 00:23:57 +0000MEDIUM 5.8: TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute ahttps://patchthecve.com/cve/CVE-2015-1044.htmlhttps://patchthecve.com/cve/CVE-2015-1044.htmlWed, 17 Jun 2026 00:21:40 +0000LOW 3.3: vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to cause a host OS denial of service via unspecified vectors.https://patchthecve.com/cve/CVE-2015-1043.htmlhttps://patchthecve.com/cve/CVE-2015-1043.htmlWed, 17 Jun 2026 00:21:40 +0000LOW 3.3: The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS users to cause a guest OS denial of service via unspecified vectors.https://patchthecve.com/cve/CVE-2014-8370.htmlhttps://patchthecve.com/cve/CVE-2014-8370.htmlWed, 17 Jun 2026 00:16:38 +0000MEDIUM 6.4: VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service (arbitrary write to a file) by modifying a configuration file.https://patchthecve.com/cve/CVE-2014-10024.htmlhttps://patchthecve.com/cve/CVE-2014-10024.htmlWed, 17 Jun 2026 00:04:06 +0000HIGH 7.5: Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overhttps://patchthecve.com/cve/CVE-2014-3793.htmlhttps://patchthecve.com/cve/CVE-2014-3793.htmlWed, 17 Jun 2026 00:08:53 +0000MEDIUM 5.8: VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS is used, allows guest OS users to gain guest OS privileges or cause a denial of service (kernel NULL pointer dereferencehttps://patchthecve.com/cve/CVE-2014-2384.htmlhttps://patchthecve.com/cve/CVE-2014-2384.htmlWed, 17 Jun 2026 00:06:31 +0000MEDIUM 4.9: vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation and system crash) via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as non-exploitahttps://patchthecve.com/cve/CVE-2014-1208.htmlhttps://patchthecve.com/cve/CVE-2014-1208.htmlWed, 17 Jun 2026 00:04:31 +0000LOW 3.3: VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of service (VMX process disruption) by using an invalid port.https://patchthecve.com/cve/CVE-2013-3519.htmlhttps://patchthecve.com/cve/CVE-2013-3519.htmlTue, 16 Jun 2026 23:55:19 +0000HIGH 7.9: lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a chttps://patchthecve.com/cve/CVE-2013-5972.htmlhttps://patchthecve.com/cve/CVE-2013-5972.htmlTue, 16 Jun 2026 23:59:49 +0000HIGH 7.2: VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via unspecified vectors.https://patchthecve.com/cve/CVE-2013-1662.htmlhttps://patchthecve.com/cve/CVE-2013-1662.htmlTue, 16 Jun 2026 23:51:51 +0000MEDIUM 6.9: vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsb_release binary in a directory in the PATH, related to use of the popen library function.https://patchthecve.com/cve/CVE-2012-1666.htmlhttps://patchthecve.com/cve/CVE-2012-1666.htmlTue, 16 Jun 2026 23:40:03 +0000MEDIUM 6.9: Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the currenhttps://patchthecve.com/cve/CVE-2012-3289.htmlhttps://patchthecve.com/cve/CVE-2012-3289.htmlTue, 16 Jun 2026 23:42:56 +0000HIGH 7.8: VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device.https://patchthecve.com/cve/CVE-2012-3288.htmlhttps://patchthecve.com/cve/CVE-2012-3288.htmlTue, 16 Jun 2026 23:42:56 +0000HIGH 9.3: VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial ohttps://patchthecve.com/cve/CVE-2012-2450.htmlhttps://patchthecve.com/cve/CVE-2012-2450.htmlTue, 16 Jun 2026 23:41:34 +0000HIGH 9.0: VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service (invalid write operation and VMX process crhttps://patchthecve.com/cve/CVE-2012-2449.htmlhttps://patchthecve.com/cve/CVE-2012-2449.htmlTue, 16 Jun 2026 23:41:34 +0000HIGH 9.0: VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which allows guest OS users to cause a denial of service (out-of-bounds write operatihttps://patchthecve.com/cve/CVE-2012-1518.htmlhttps://patchthecve.com/cve/CVE-2012-1518.htmlTue, 16 Jun 2026 23:39:40 +0000HIGH 8.3: VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors.https://patchthecve.com/cve/CVE-2011-3868.htmlhttps://patchthecve.com/cve/CVE-2011-3868.htmlTue, 16 Jun 2026 23:34:03 +0000HIGH 9.3: Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in an ISO image.