CVE-2017-4900: VMware Workstation Player

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Affected products

• VMware Workstation Player: version 12.0.0 only; version 12.0.1 only; version 12.1.0 only; version 12.5.0 only; version 12.5.1 only; version 12.5.2 only
• VMware Workstation Pro: version 12.0.0 only; version 12.0.1 only; version 12.1.0 only; version 12.5.0 only; version 12.5.1 only; version 12.5.2 only

Published 2017-06-07. Last modified 2026-06-17.