VMware Vix API vulnerabilities

2 CVEs affecting VMware Vix API, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-1126, published 2011-04-04.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-1126, published 2011-04-04. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared…
• CVE-2010-1139, published 2010-04-12. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and…