KLA12190 Multiple vulnerabilities in VMware Workstation and VMware Player

Multiple out-of-bounds read vulnerabilities were found in VMware Workstation and VMware Player. Malicious users can exploit this vulnerability to obtain sensitive information, cause denial of service.

Original advisories

VMSA-2021-0009

Related products

VMware-Workstation

VMware-Player

CVE list

CVE-2021-21989 high

CVE-2021-21988 high

CVE-2021-21987 high

Solution

Update to the latest version

Download VMware Workstation

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• VMware Workstation 16.x earlier than 16.1.2VMware Player 16.x earlier than 16.1.2