What’s Vulnerable › Products
VMware Workstation vulnerabilities
225 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your VMware Workstation version is affected
Exploited VMware Workstation vulnerabilities
- CVE-2025-22226 — VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
- CVE-2025-22224 — VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
Latest VMware Workstation vulnerabilities
- CVE-2026-59347 — VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability (CVSS 8.1)
- CVE-2026-59346 — VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability (CVSS 9.3)
- CVE-2026-41703 — Out-of-bounds read vulnerability (CVSS 7.6)
- CVE-2026-22717 — VMware Workstation out-of-bound read vulnerability (CVSS 2.7)
- CVE-2026-22716 — VMware Workstation out-of-bounds write vulnerability (CVSS 5.0)
- CVE-2026-22722 — VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash (CVSS 6.1)
- CVE-2026-22715 — VMware Workstation/Fusion NAT vulnerability (CVSS 5.9)
- CVE-2025-41239 — vSockets information-disclosure vulnerability (CVSS 7.1)
- CVE-2025-41238 — PVSCSI heap-overflow vulnerability (CVSS 9.3)
- CVE-2025-41237 — VMCI integer-underflow vulnerability (CVSS 9.3)
- CVE-2025-41236 — VMXNET3 integer-overflow vulnerability (CVSS 9.3)
- CVE-2025-41227 — Denial-of-Service Vulnerability (CVSS 5.5)
- CVE-2025-22226 — VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability (CVSS 6.0) — exploited
- CVE-2025-22224 — VMware ESXi and Workstation TOCTOU Race Condition Vulnerability (CVSS 8.2) — exploited
- CVE-2024-22273 — (CVSS 7.8)
- CVE-2024-22270 — (CVSS 6.0)
- CVE-2024-22269 — (CVSS 6.0)
- CVE-2024-22268 — (CVSS 6.5)
- CVE-2024-22267 — (CVSS 8.2)
- CVE-2024-22255 — Information disclosure vulnerability (CVSS 7.1)
- CVE-2024-22253 — Use-after-free vulnerability (CVSS 6.7)
- CVE-2024-22252 — Use-after-free vulnerability (CVSS 6.7)
- CVE-2024-22251 — Out-of-bounds read vulnerability (CVSS 4.4)
- CVE-2023-34044 — Information disclosure vulnerability in bluetooth device-sharing functionality (CVSS 6.0)
- CVE-2023-20870 — (CVSS 6.0)