CVE-2017-4939: VMware Workstation

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code.

Affected products

• VMware Workstation: version 12.0.0 only; version 12.0.1 only; version 12.1.1 only; version 12.5.0 only; version 12.5.1 only; version 12.5.2 only; …

Published 2017-11-17. Last modified 2026-06-17.