vmware workstation player

Name: vmware workstation player
Brand: vmware

productUS

cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical15high10medium1low

updated 2026-10-26

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-5330US	high7.8	18.0% (97th)	Exploit	12.1.1	2016-08-08	12.1.0 → 12.1.1
CVE-2018-5511US	high7.2	14.2% (97th)	Exploit	no fix	2018-04-13	= 15.0.2
CVE-2017-4915US	high7.8OT elevated	5.41% (93rd)	Exploit	no fix	2017-05-22	= 12.0.0
CVE-2017-4916US	medium6.5	4.95% (92nd)	Exploit	no fix	2017-05-22	= 12.0.0
CVE-2016-7084US	high7.8	1.52% (74th)	Exploit	no fix	2016-12-29	4 versions
CVE-2016-7083US	high7.8	1.50% (74th)	Exploit	no fix	2016-12-29	4 versions
CVE-2017-4905US	medium5.5	1.20% (68th)	Exploit	12.5.5	2017-06-07	12.0.0 → 12.5.5
CVE-2018-6957US	medium5.3	1.59% (75th)	—	14.1.1	2018-03-15	13 versions
CVE-2020-3982US	high7.7	0.83% (57th)	—	no fix	2020-10-20	15.0 → 15.5.6
CVE-2021-22040US	medium6.7	0.73% (54th)	—	16.2.1	2022-02-16	16.0.0 → 16.2.1
CVE-2016-7461US	high8.8	0.56% (46th)	—	no fix	2016-12-29	6 versions
CVE-2016-7081US	high7.8	0.52% (43rd)	—	no fix	2016-12-29	4 versions
CVE-2017-4902US	high8.8	0.52% (43rd)	—	12.5.5	2017-06-07	12.0.0 → 12.5.5
CVE-2017-4904US	high8.8	0.43% (36th)	—	12.5.5	2017-06-07	12.0.0 → 12.5.5
CVE-2016-7085US	high7.8	0.42% (35th)	—	no fix	2016-12-29	4 versions
CVE-2017-4903US	high8.8	0.41% (34th)	—	12.5.5	2017-06-07	12.0.0 → 12.5.5
CVE-2017-4898US	high8.8	0.39% (32nd)	—	no fix	2017-06-07	6 versions
CVE-2016-7082US	high7.8	0.38% (31st)	—	no fix	2016-12-29	4 versions
CVE-2016-7086US	high7.8	0.34% (26th)	—	no fix	2016-12-29	4 versions
CVE-2017-4900US	medium5.5	0.34% (26th)	—	no fix	2017-06-07	6 versions
CVE-2020-3990US	medium6.5	0.32% (24th)	—	16.0.0	2020-09-16	15.0.0 → 16.0.0
CVE-2020-3988US	medium6.1	0.30% (22nd)	—	16.0.0	2020-09-16	15.0.0 → 16.0.0
CVE-2020-3987US	medium6.1	0.30% (22nd)	—	16.0.0	2020-09-16	15.0.0 → 16.0.0
CVE-2020-3986US	medium6.1	0.30% (22nd)	—	16.0.0	2020-09-16	15.0.0 → 16.0.0
CVE-2017-4899US	medium4.7	0.29% (21st)	—	no fix	2017-06-07	5 versions
CVE-2020-3989US	low3.3	0.29% (20th)	—	16.0.0	2020-09-16	15.0.0 → 16.0.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer9 CVEs
CWE-125Out-of-bounds Read5 CVEs
CWE-426Untrusted Search Path2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-264CWE-2641 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan