CVE-2012-1518: VMware Esx

High severity, CVSS 8.3. EPSS: 1.7% chance of exploitation in the next 30 days.

VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors.

Affected products

• VMware Esx: version 3.5 only; version 4.0 only; version 4.1 only
• VMware ESXi: version 3.5 only; version 4.0 only; version 4.1 only; version 5.0 only
• VMware Fusion: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.1 only; version 4.1.1 only
• VMware Player: version 4.0 only; version 4.0.1 only; version 4.0.2 only
• VMware Workstation: version 8.0 only; version 8.0.1 only

Published 2012-04-17. Last modified 2026-06-16.