Known vulnerabilities in VMware Fusion 13.0.1

Vendor: Broadcom
Software: VMware Fusion
Version: 13.0.1
Software CPE: cpe:2.3:a:broadcom:vmware_fusion:*:*:*:*:*:*:*:*
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Fusion version 13.0.1 VMware Fusion 13.0.1 is affected by 24 vulnerabilities: 6 high, 12 medium, 6 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123297 - Permissions, Privileges, and Access Controls
CVE-2026-22715
CWE-264 Low
No
No
25H2u1 26.02.2026 SB2026022627
#VU113009 - Missing release of memory after effective lifetime
CVE-2025-41239
CWE-401 Medium
No
No
13.6.4 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 3 more
#VU113008 - Heap-based Buffer Overflow
CVE-2025-41238
CWE-122 Medium
No
No
13.6.4 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU113007 - Integer underflow
CVE-2025-41237
CWE-191 Medium
No
No
13.6.4 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU113006 - Integer overflow
CVE-2025-41236
CWE-190 High
No
No
13.6.4 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU109486 - Resource exhaustion
CVE-2025-41227
CWE-400 Medium
No
No
13.6.3 20.05.2025 SB2025052065
SB2025052067
SB2025052068
and 1 more
#VU105280 - Out-of-bounds read
CVE-2025-22226
CWE-125 High
No
Exploited
13.6.3 04.03.2025 SB2025030423
SB2025030425
SB2025030426
and 3 more
#VU96785 - Out-of-bounds write
CVE-2024-22273
CWE-787 Medium
No
No
13.5.1 04.09.2024 SB2024090421
SB2024090423
SB2024102803
#VU96727 - Improper input validation
CVE-2024-38811
CWE-20 Low
No
No
13.6 03.09.2024 SB2024090350
#VU89634 - Improper Initialization
CVE-2024-22270
CWE-665 Medium
No
No
13.5.2 17.05.2024 SB2024051719
#VU89633 - Improper Initialization
CVE-2024-22269
CWE-665 Medium
No
No
13.5.2 17.05.2024 SB2024051719
#VU89631 - Heap-based Buffer Overflow
CVE-2024-22268
CWE-122 Low
No
No
13.5.2 17.05.2024 SB2024051719
#VU89630 - Use After Free
CVE-2024-22267
CWE-416 Medium
No
No
13.5.2 17.05.2024 SB2024051719
#VU87133 - Exposure of sensitive information to an unauthorized actor
CVE-2024-22255
CWE-200 Medium
No
No
13.5.1 05.03.2024 SB2024030548
SB2024030549
SB2024042355
and 3 more
#VU87131 - Use After Free
CVE-2024-22253
CWE-416 High
No
No
13.5.1 05.03.2024 SB2024030548
SB2024030549
SB2024042355
and 3 more
#VU87130 - Use After Free
CVE-2024-22252
CWE-416 High
No
No
13.5.1 05.03.2024 SB2024030548
SB2024030549
SB2024042355
and 3 more
#VU86854 - Out-of-bounds read
CVE-2024-22251
CWE-125 Medium
No
No
13.5.1 27.02.2024 SB2024022740
#VU82271 - Permissions, Privileges, and Access Controls
CVE-2023-34046
CWE-264 Low
No
No
13.5 20.10.2023 SB2023102009
#VU82270 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-34045
CWE-362 Low
No
No
13.5 20.10.2023 SB2023102009
#VU82269 - Out-of-bounds read
CVE-2023-34044
CWE-125 Medium
No
No
13.5 20.10.2023 SB2023102008


Showing elements 1 - 20 out of 24