CVE-2017-4898: VMware Workstation Player

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed.

Affected products

• VMware Workstation Player: version 12.0.0 only; version 12.0.1 only; version 12.1.0 only; version 12.5.0 only; version 12.5.1 only; version 12.5.2 only
• VMware Workstation Pro: version 12.0.0 only; version 12.0.1 only; version 12.1.0 only; version 12.5.0 only; version 12.5.1 only; version 12.5.2 only

Published 2017-06-07. Last modified 2026-06-17.