What’s Vulnerable › Products
VMware Fusion vulnerabilities
140 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your VMware Fusion version is affected
Exploited VMware Fusion vulnerabilities
- CVE-2025-22226 — VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
- CVE-2020-3950 — VMware Multiple Products Privilege Escalation Vulnerability
Latest VMware Fusion vulnerabilities
- CVE-2026-59347 — VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability (CVSS 8.1)
- CVE-2026-59346 — VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability (CVSS 9.3)
- CVE-2026-41703 — Out-of-bounds read vulnerability (CVSS 7.6)
- CVE-2026-41702 — TOCTOU local privilege escalation vulnerability (CVSS 7.0)
- CVE-2026-22715 — VMware Workstation/Fusion NAT vulnerability (CVSS 5.9)
- CVE-2025-41239 — vSockets information-disclosure vulnerability (CVSS 7.1)
- CVE-2025-41238 — PVSCSI heap-overflow vulnerability (CVSS 9.3)
- CVE-2025-41237 — VMCI integer-underflow vulnerability (CVSS 9.3)
- CVE-2025-41236 — VMXNET3 integer-overflow vulnerability (CVSS 9.3)
- CVE-2025-41227 — Denial-of-Service Vulnerability (CVSS 5.5)
- CVE-2025-22226 — VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability (CVSS 6.0) — exploited
- CVE-2024-38811 — Code-execution vulnerability (CVSS 7.8)
- CVE-2024-22273 — (CVSS 7.8)
- CVE-2024-22270 — (CVSS 6.0)
- CVE-2024-22269 — (CVSS 6.0)
- CVE-2024-22268 — (CVSS 6.5)
- CVE-2024-22267 — (CVSS 8.2)
- CVE-2024-22255 — Information disclosure vulnerability (CVSS 7.1)
- CVE-2024-22253 — Use-after-free vulnerability (CVSS 6.7)
- CVE-2024-22252 — Use-after-free vulnerability (CVSS 6.7)
- CVE-2024-22251 — Out-of-bounds read vulnerability (CVSS 4.4)
- CVE-2023-34045 — VMware Fusion installer local privilege escalation (CVSS 7.8)
- CVE-2023-34046 — VMware Fusion TOCTOU local privilege escalation vulnerability (CVSS 7.0)
- CVE-2023-34044 — Information disclosure vulnerability in bluetooth device-sharing functionality (CVSS 6.0)
- CVE-2023-20870 — (CVSS 6.0)