VMware Player vulnerabilities

5 CVEs affecting VMware Player, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-4916, published 2009-04-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-0177, published 2009-01-20. Medium severity, CVSS 5.0. EPSS: 8.6% chance of exploitation in the next 30 days. vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware…
CVE-2008-0923, published 2008-02-26. Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write…
CVE-2007-5671, published 2008-06-05. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build…
CVE-2007-5438, published 2007-10-13. Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x…
CVE-2008-4916, published 2009-04-06. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and…