CVE-2018-6973: VMware Fusion

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host.

Affected products

• VMware Fusion: after 10.0.0, before 10.1.3 (fixed in 10.1.3)
• VMware Workstation: from 14.0.0, before 14.1.3 (fixed in 14.1.3)

Published 2018-08-15. Last modified 2026-06-17.