VMware vulnerabilities

3 known CVE vulnerabilities in VMware, translated and rated.

CVE-2005-4459High
A heap-based buffer overflow in VMware NAT networking components (vmnat.exe and vmnet-natd) in Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted EPRT and PORT FTP commands.
CVE-2023-20900High
A malicious actor that has been granted Guest Operation Privileges in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias.
CVE-2000-0090Low
VMware 1.1.2 allows local users to perform a symlink attack, which can lead to denial of service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS