VULNERABILITY INTELLIGENCE

CVE-2018-6983

CVSS score8.8 HIGH

EPSS probability0.45%

CISA KEVNot currently listed

Published2018-11-27

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer overflow vulnerability in the virtual network devices. This issue may allow a guest to execute code on the host.

Weakness classification

CWE-190: Integer Overflow or Wraparound

Primary references

security@vmware.com — Third Party Advisory, VDB Entry
security@vmware.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory