Known vulnerabilities in VMware Fusion 13.6.1
Vendor:
Broadcom
Software:
VMware Fusion
Version:
13.6.1
Software CPE:
cpe:2.3:a:broadcom:vmware_fusion:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
1
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
26H1
25H2u1
25H2
13.6.4
7.0.0
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
6.0.6
7.0.1
13.6.3
13.6.2
13.6.1
13.6
13.5.2
13.5.1
13.5
13.0.2
13.0.1
13.0
12.2.5
12.2.4
12.2.3
12.2.2
12.2.1
12.2.0
11.5.7
11.5.6
11.5.5
11.5.3
11.5.2
11.5.1
11.5.0
11.1.1
11.1.0
10.1.6
11.0.3
11.0.2
10.1.5
11.0.1
11.0.0
10.1.4
-
10.1.3
10.1.2
10.1.1
8.5.10
10.1.0
10.0
8.5.9
8.5.8
8.5.7
8.5.6
8.5.5
8.5.4
8.5.3
8.5.2
8.5.1
8.1.1
8.1
8.0.2
8.0.1
8.0
8.5
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123297 - Permissions, Privileges, and Access Controls CVE-2026-22715 |
CWE-264 | Low | 25H2u1 | 26.02.2026 |
SB2026022627 |
||
| #VU113009 - Missing release of memory after effective lifetime CVE-2025-41239 |
CWE-401 | Medium | 13.6.4 | 17.07.2025 |
SB2025071701 SB2025071702 SB2025071703 and 3 more |
||
| #VU113008 - Heap-based Buffer Overflow CVE-2025-41238 |
CWE-122 | Medium | 13.6.4 | 17.07.2025 |
SB2025071701 SB2025071702 SB2025071703 and 2 more |
||
| #VU113007 - Integer underflow CVE-2025-41237 |
CWE-191 | Medium | 13.6.4 | 17.07.2025 |
SB2025071701 SB2025071702 SB2025071703 and 2 more |
||
| #VU113006 - Integer overflow CVE-2025-41236 |
CWE-190 | High | 13.6.4 | 17.07.2025 |
SB2025071701 SB2025071702 SB2025071703 and 2 more |
||
| #VU109486 - Resource exhaustion CVE-2025-41227 |
CWE-400 | Medium | 13.6.3 | 20.05.2025 |
SB2025052065 SB2025052067 SB2025052068 and 1 more |
||
| #VU105280 - Out-of-bounds read CVE-2025-22226 |
CWE-125 | High | 13.6.3 | 04.03.2025 |
SB2025030423 SB2025030425 SB2025030426 and 3 more |