CVE-2017-4902

CVE-2017-4902: vulnerability in VMware ESXi

Published · Updated

Follow this CVE+ Monitor ESXi+ Monitor Workstation Pro / Player

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA. This issue may allow a guest to execute code on the host.
Affected products
VMware · ESXiVMware · Fusion Pro / FusionVMware · Workstation Pro / Player
Related CVEs — VMware ESXi

In the same product, most dangerous first.

CVE-2025-22224CRITICALCVE-2025-22224EPSS 1.6%KEVCVE-2017-4901—CVE-2017-4901EPSS 19.9%CVE-2017-4933—CVE-2017-4933EPSS 3.6%CVE-2025-41239HIGHvSockets information-disclosure vulnerabilityEPSS 3.2%CVE-2017-4941—CVE-2017-4941EPSS 3.2%CVE-2018-6972—CVE-2018-6972EPSS 3.0%