Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-6974

VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3

Description

VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware ESXi

  • 6.7 before ESXi670-201810101-SGaffected
  • 6.5 before ESXi650-201808401-BGaffected
  • 6.0 before ESXi600-201808401-BGaffected

VMware Workstation

  • 14.x before 14.1.3affected

VMware Fusion

  • 10.x before 10.1.3affected

References