Known Vulnerabilities for Workstation by Vmware

Listed below are 10 of the newest known vulnerabilities associated with "Workstation" by "Vmware".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2025-23477 Missing Authorization vulnerability in realtyworkstation Realty Workstation realty-workstation allows Accessing Functionality... Not Provided 2025-01-21 2026-04-01
CVE-2024-50489 Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-worksta... Not Provided 2024-10-28 2026-04-01
CVE-2022-22983 VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability. A malicious actor wit... 5.9 - MEDIUM 2022-08-10 2022-08-15
CVE-2022-22938 VMware Workstation (16.x prior to 16.2.2) and Horizon Client for Windows (5.x prior to 5.5.3) contains a denial-of-service vu... 6.5 - MEDIUM 2022-01-28 2022-02-04
CVE-2021-22045 VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMwar... 7.8 - HIGH 2022-01-04 2022-01-27
CVE-2021-22041 VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor with ... 6.7 - MEDIUM 2022-02-16 2022-02-24
CVE-2021-21989 VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vuln... 6.5 - MEDIUM 2021-05-24 2021-06-04
CVE-2021-21988 VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vuln... 6.5 - MEDIUM 2021-05-24 2021-06-04
CVE-2021-21987 VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vuln... 6.5 - MEDIUM 2021-05-24 2021-06-04
CVE-2020-3951 VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-servi... 3.8 - LOW 2020-03-17 2020-03-24
Results limited to 10 most recent vulnerabilities

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationVmwareWorkstation9.0.3AllAllAll
ApplicationVmwareWorkstation9.0.2AllAllAll
ApplicationVmwareWorkstation9.0.1AllAllAll
ApplicationVmwareWorkstation9.0AllAllAll
ApplicationVmwareWorkstation8.0.6AllAllAll
ApplicationVmwareWorkstation8.0.5AllAllAll
ApplicationVmwareWorkstation8.0.4AllAllAll
ApplicationVmwareWorkstation8.0.3AllAllAll
ApplicationVmwareWorkstation8.0.2AllAllAll
ApplicationVmwareWorkstation8.0.1.27038AllAllAll
ApplicationVmwareWorkstation8.0.1AllAllAll
ApplicationVmwareWorkstation8.0.0.18997AllAllAll
ApplicationVmwareWorkstation8.0AllAllAll
ApplicationVmwareWorkstation7.1.6AllAllAll
ApplicationVmwareWorkstation7.1.5AllAllAll
ApplicationVmwareWorkstation7.1.4.16648AllAllAll
ApplicationVmwareWorkstation7.1.4AllAllAll
ApplicationVmwareWorkstation7.1.3AllAllAll
ApplicationVmwareWorkstation7.1.2AllAllAll
ApplicationVmwareWorkstation7.1.1AllAllAll
Results limited to 20 most recent known configurations
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report