VMware Patches For Workstation And Fusion Available

VMware has released updated versions of their virtualization software patching security vulnerabilities (CVE-2023-20869, CVE-2023-20870, CVE-2023-20871, CVE-2023-20872).

Affected versions:

-VMware Workstation 17.x earlier than 17.0.2

-VMware Fusion 13.x earlier than 13.0.2

More information in the VMware advisory.

VMware Patches Available

VMware has released updated versions of their virtualization software patching a security vulnerability (CVE-2022-22938).

Affected versions:

-VMware Workstation Pro/Player 16.x for Windows earlier than 16.2.2

-VMware Horizon Client for Windows earlier than 5.5.3

More information in the VMware advisory.

VMware Product Patches Available

VMware has released updated versions of their virtualization software patching a security vulnerability (CVE-2021-22045).

Affected versions:

-VMware ESXi 7.0 (patch pending at the moment of writing this)

-VMware ESXi 6.7 without ESXi670-202111101-SG update

-VMware ESXi 6.5 without ESXi650-202110101-SG update

-VMware Cloud Foundation (ESXi) 4.x (patch pending at the moment of writing this)

-VMware Cloud Foundation (ESXi) 3.x (patch pending at the moment of writing this)

-VMware Workstation 16.x for Windows earlier than 16.2.0

-VMware Fusion Pro / Fusion 12.x earlier than 12.2.0

Workaround for those at "patch pending" stage can be read here.

More information in the VMware advisory.

VMware Patches Available

VMware has released updated versions of their virtualization software patching security vulnerabilities (CVE-2020-4004, CVE-2020-4005).

Affected versions:
-VMware ESXi 7.0 without ESXi70U1b-17168206
-VMware ESXi 6.7 without ESXi670-202011101-SG update
-VMware ESXi 6.5 without ESXi650-202011301-SG update
-VMware Cloud Foundation (ESXi) 4.x earlier than 4.1.0.1
-VMware Cloud Foundation (ESXi) 3.x earlier than 3.10.1.2
-VMware Workstation Pro/Player 15.x for Windows earlier than 15.5.7
-VMware Fusion Pro / Fusion 11.x earlier than 11.5.7

More information in the VMware advisory.

VMware Vulnerability Fixes Available

VMware have released updated versions of their virtualization software patching security vulnerabilities (CVE-2020-3981, CVE-2020-3982, CVE-2020-3992, CVE-2020-3993, CVE-2020-3994, CVE-2020-3995)

Affected versions:

-VMware ESXi 7.0 without ESXi_7.0.1-0.0.16850804
-VMware ESXi 6.7 without ESXi670-202010401-SG update
-VMware ESXi 6.5 without ESXi650-202010401-SG update
-VMware Cloud Foundation (ESXi) 4.x earlier than 4.1
-VMware Cloud Foundation (ESXi) 3.x earlier than 3.10.1.1
-VMware Workstation Pro/Player 15.x for Windows (patch pending, check back the advisory)
-VMware Fusion Pro / Fusion 11.x earlier than 11.5.6
-NSX-T 3.x earlier than 3.0.2
-NSX-T 2.5.x earlier than 2.5.2.2.0
-VMware Cloud Foundation (NSX-T) 4.x earlier than 4.1
-VMware Cloud Foundation (NSX-T) 3.x earlier than 3.10.1.1


More information in VMware advisory here.

VMware Software Patches Available

VMware have released updated versions of their virtualization software patching security vulnerabilities (CVE-2020-3976).

Affected versions:

-VMware Workstation Pro/Player 15.x for Windows (patch pending, check back the advisory)

-VMware Fusion Pro / Fusion 11.x (patch pending, check back the advisory)

-Horizon Client for Windows 5.x versions earlier than 5.4.4

More information in VMware advisory here. 

VMware Updates Available

VMware have released updated versions of their virtualization software patching security vulnerabilities.

Affected versions:
-VMware ESXi 7.0 without ESXi_7.0.0-1.20.16321839 update
-VMware ESXi 6.7 without ESXi670-202004101-SG update
-VMware ESXi 6.5 without ESXi650-202005401-SG update
-VMware Workstation Pro/Player versions earlier than 15.5.5
-VMware Cloud Foundation 4.x versions earlier than 4.0.1
-VMware Cloud Foundation 3.x versions earlier than 3.10.0.1 (release of 3.10.0.1 is pending at the moment of writing this)

More information in VMware advisory here.

VMware Vulnerabilities Fixed

VMware have released updated versions of their virtualization software patching one important (CVE-2020-3957), one moderate (CVE-2020-3958) and one low (CVE-2020-3959) categorized vulnerabilities.

Affected versions:
-VMware Workstation Pro/Player for Windows versions earlier than 15.5.2
-VMware Fusion Pro / Fusion versions earlier than 11.5.5
-ESXi 6.7 versions without patch ESXi670-202004101-SG
-ESXi 6.5 versions without patch ESXi650-202005401-SG
-Horizon Client for Windows and Mac 5.x & earlier versions (patch pending, check back the advisory)
-VMRC (VMware Remote Console) for Mac 11.x & earlier versions (patch pending, check back the advisory)

More information in VMware advisory here.

VMware Updates Available

VMware have released updated versions of their virtualization software patching one important (CVE-2020-3950) and one low (CVE-2020-3951) categorized vulnerabilities.

Affected versions:
-VMware Workstation Pro/Player for Windows versions earlier than 15.5.2
-VMware Fusion Pro / Fusion versions earlier than 11.5.3
-Horizon Client for Windows and Mac 5.x & earlier versions before 5.4.0
-VMRC (VMware Remote Console) for Mac 11.x & earlier versions before 11.0.1

More information in VMware advisory here.

VMware Updates Available

VMware have released updated versions of their virtualization software patching one critical (CVE-2020-3947) and two important (CVE-2020-3948, CVE-2019-5543) categorized vulnerabilities.

Affected versions:
-VMware Workstation Pro/Player versions earlier than 15.5.2
-VMware Fusion Pro / Fusion versions earlier than 11.5.2
-Horizon Client for Windows 5.x earlier than 5.3.0
-VMRC (VMware Remote Console) for Windows 10.x earlier than 11.0.0

More information in VMware advisory here.

VMware Updates Available

VMware have released updated versions of their virtualization software patching one moderate (CVE-2019-5539) categorized vulnerability.

Affected versions:
-Horizon Client for Windows 7.x.x earlier than 7.11.0 or 7.10.1 or 7.5.4
-VMware Workstation Pro/Player versions earlier than 15.5.1

More information in VMware advisory here.

VMware Updates Available

VMware have released updated versions of their virtualization software patching security vulnerabilities.

Affected versions:
-ESXi 6.7 without Patch Release ESXi670-201911401-BG or ESXi670-201911402-BG
-ESXi 6.5 without Patch Release ESXi650-201911401-BG or ESXi650-201911402-BG
-ESXi 6.0 without Patch Release ESXi600-201911401-BG or ESXi600-201911402-BG
-VMware Workstation Pro/Player versions earlier than 15.5.1
-VMware Fusion earlier than 11.5.1

More information in VMware advisories here and here.

More VMware Updates Available

VMware have released updated versions of their virtualization software patching one moderate (CVE-2019-5536) categorized vulnerability.

Affected versions:
-ESXi 6.7 without Patch Release ESXi670-201908101-SG
-ESXi 6.5 without Patch Release ESXi650-201910401-SG
-VMware Workstation Pro/Player versions earlier than 15.5.0
-VMware Fusion earlier than 11.5.0

More information in VMware advisory here.

VMware Updates Available

VMware have released updated versions of their virtualization software patching one important (CVE-2019-5527) and one moderate (CVE-2019-5535) categorized vulnerability.

Affected versions:
-ESXi 6.7 without Patch Release ESXi670-201904101-SG
-ESXi 6.5 without Patch Release ESXi650-201903401-SG
-ESXi 6.0 without Patch Release ESXi600-201909101-SG
-VMRC for Windows earlier than 10.0.5
-VMRC for Linux earlier than 10.0.5
-Horizon Client for Windows earlier than 5.2.0
-Horizon Client for Linux earlier than 5.2.0
-Horizon Client for Mac earlier than 5.2.0
-VMware Workstation Pro/Player versions earlier than 15.5.0
-VMware Fusion earlier than 11.5.0

More information in VMware advisory here.

VMware Updates Available

VMware have released updated versions of their virtualization software to fix two security vulnerabilities. VMware Tools are affected by an out of bounds read vulnerability (CVE-2019-5522). A local attacker with non-administrative access to a Windows guest with VMware Tools installed may be able to leak kernel information or create a denial of service attack on the same Windows guest machine.

VMware Workstation Linux version has a use-after-free vulnerability (CVE-2019-5525). A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.

Affected versions:
-VMware Tools 10.x Windows versions earlier than 10.3.10
-VMware Workstation 15.x Linux versions earlier than 15.1.0


More information with instructions for updating can be read from the correspondent VMware advisory.

VMware Updates Available

VMware has released security updates to vulnerabilities in their virtualization applications.

Affected versions:
- VMware ESXi 6.7 without ESXi670-201903001 patch
- VMware ESXi 6.5 without ESXi650-201903001 patch
- VMware ESXi 6.0 without ESXi600-201903001 patch
- VMware Workstation Pro / Player 15.x versions earlier than 15.0.4
- VMware Workstation Pro / Player 14.x versions earlier than 14.1.7
- VMware Fusion Pro / Fusion 11.x versions earlier than 11.0.3
- VMware Fusion Pro / Fusion 10.x versions earlier than 10.1.6

Further information including updating instructions can be read from VMware's security advisory.

VMware Workstation Updates Available

VMware has released security updates to two elevation of privilege vulnerabilities (CVE-2019-5511, CVE-2019-5512) in their virtualization applications.

Affected versions:
- VMware Workstation Pro / Player 15.x versions earlier than 15.0.3 for Windows
- VMware Workstation Pro / Player 14.x versions earlier than 14.1.6 for Windows

Further information including updating instructions can be read from VMware's security advisory.

VMware Workstation And Fusion Updates Available

VMware has released security updates to a integer overflow vulnerability (CVE-2018-6983) in their virtualization applications. The vulnerability may allow a guest to execute arbitrary code on the host.

Affected versions:
- VMware Workstation Pro / Player 15.x versions earlier than 15.0.2
- VMware Workstation Pro / Player 14.x versions earlier than 14.1.5
- VMware Fusion Pro / Fusion 11.x versions earlier than 11.0.2
- VMware Fusion Pro / Fusion 10.x versions earlier than 10.1.5

Further information including updating instructions can be read from VMware's security advisory.

VMware Updates Available

VMware has released security updates to two uninitialized stack memory usage vulnerabilities (CVE-2018-6981, CVE-2018-6982) in their virtualization applications. One of the vulnerabilities (CVE-2018-6981) may allow a guest to execute arbitrary code on the host.

Affected versions:
- VMware ESXi 6.7 without ESXi670-201811401-BG patch
- VMware ESXi 6.5 without ESXi650-201811301-BG patch
- VMware ESXi 6.0 without ESXi600-201811401-BG patch
- VMware Workstation Pro / Player 15.x versions earlier than 15.0.1
- VMware Workstation Pro / Player 14.x versions earlier than 14.1.4
- VMware Fusion Pro / Fusion 10.x versions earlier than 10.1.4

Further information including updating instructions can be read from VMware's security advisory.

VMware Updates Available

VMware has released security updates to patch an out-of-bounds read vulnerability (CVE-2018-6974) in their virtualization applications. The vulnerability may allow a guest to execute arbitrary code on the host.

Affected versions:
- VMware ESXi 6.7 without ESXi670-201810101-SG patch
- VMware ESXi 6.5 without ESXi650-201808401-BG patch
- VMware ESXi 6.0 without ESXi600-201808401-BG patch
- VMware Workstation Pro / Player 14.x versions earlier than 14.1.3
- VMware Fusion Pro / Fusion 10.x versions earlier than 10.1.3

Further information including updating instructions can be read from VMware's security advisory.