CVE-2015-2338: VMware Fusion

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause a host OS denial of service via unspecified vectors, a different vulnerability than CVE-2015-2339.

Affected products

• VMware Fusion: version 6.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; version 6.0.4 only; version 6.0.5 only; …
• VMware Horizon Client: version 3.2.0 only; version 3.3 only
• VMware Horizon View Client: version 5.4 only; version 5.4.1 only
• VMware Player: version 6.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; version 6.0.4 only; version 6.0.5 only; …
• VMware Workstation: version 10.0 only; version 10.0.1 only; version 10.0.2 only; version 10.0.3 only; version 10.0.4 only; version 10.0.5 only; …

Published 2015-06-13. Last modified 2026-06-17.