CVE-2017-4898

CVE-2017-4898: vulnerability in VMware Workstation Pro/Player

Published · Updated

Follow this CVE+ Monitor Workstation Pro / Player

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%
VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed.
Affected products
VMware · Workstation Pro/Player
Related CVEs — VMware Workstation Pro/Player

In the same product, most dangerous first.

CVE-2017-4901—CVE-2017-4901EPSS 19.9%CVE-2017-4915—CVE-2017-4915EPSS 5.4%CVE-2017-4916—CVE-2017-4916EPSS 5.0%CVE-2017-4900—CVE-2017-4900EPSS 0.3%CVE-2017-4899—CVE-2017-4899EPSS 0.3%