CVE-2018-6973: VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow…

PriorityP343high8.8CVSS 3.0

AVLACLPRLUINSCCHIHAH

EPSS

0.49%

39.1th percentile

VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
vmware	esxi	—	—
vmware	fusion	< 10.1.3	10.1.3
vmware	fusion	—	—
vmware	fusion_pro	—	—
vmware	vmware_fusion	—	—
vmware	vmware_workstation	—	—
vmware	workstation	—	—
vmware	workstation	>= 14.0.0 < 14.1.3	14.1.3
vmware	workstation_player	—	—
vmware	workstation_pro	—	—

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.