CVE-2017-4915

CVE-2017-4915: vulnerability in VMware Workstation Pro/Player

Published · Updated

Follow this CVE+ Monitor Workstation Pro / Player

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

38Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 5.4%
from disclosure to weaponsame day
Published on NVDMay 22
1st PoCMay 22
metasploitMay 22
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine.
Affected products
VMware · Workstation Pro/Player
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — VMware Workstation Pro/Player

In the same product, most dangerous first.

CVE-2017-4901—CVE-2017-4901EPSS 19.9%CVE-2017-4916—CVE-2017-4916EPSS 5.0%CVE-2017-4898—CVE-2017-4898EPSS 0.4%CVE-2017-4900—CVE-2017-4900EPSS 0.3%CVE-2017-4899—CVE-2017-4899EPSS 0.3%