What’s Vulnerable › Vulnerabilities

CVE-2018-6967

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-09 · updated 2026-06-17
• Weakness: CWE-125

Description

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6966.

Affected products

• VMware ESXi: 6.7, 6.7-670-201806001
• VMware Fusion: from 10.0 before 10.1.2 — fixed in 10.1.2
• VMware Workstation: from 14.0 before 14.1.2 — fixed in 14.1.2

How to fix

Upgrade to a fixed version: VMware Fusion 10.1.2; VMware Workstation 14.1.2. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/104709
• http://www.securitytracker.com/id/1041208
• https://www.vmware.com/security/advisories/VMSA-2018-0016.html
• http://www.securityfocus.com/bid/104709
• http://www.securitytracker.com/id/1041208
• https://www.vmware.com/security/advisories/VMSA-2018-0016.html

Get alerted when CVE-2018-6967 or the next vulnerability affects your stack