The flaws affect VMware Workstation, Player, ACE, Server and ESX.
According to a US-CERT advisory on Tuesday, the vulnerabilities could be exploited to execute arbitrary code, cause a denial-of-service condition, assume elevated privileges or disclose information.
Three of the bugs are related to errors in ActiveX controls, Internet Server Application Programming Interface (ISAPI) and OpenProcess.
The French Security Incident Response Team rated the vulnerabilities "moderate risk." US-CERT encourages users to update to the latest versions.
See original article on scmagazineus.com
.jpg&h=140&w=231&c=1&s=0)
iTnews Executive Retreat - Data & AI Edition
.png&w=120&c=1&s=0)
iTnews Cloud Covered Breakfast Summit
iTnews State of Security Breakfast
The 2026 iAwards
.jpg&w=120&c=1&s=0)
Integrate 2026
_(1).jpg&h=140&w=231&c=1&s=0)
