CVE-2018-6981

—

CVSS 3.1

8.8 high

EPSS

1%p69

Published

Dec 4, 2018 (Dec 4, 2018)

Modified

Jun 17, 2026

Description

VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host.

Vendors: vmware
Products: workstation, fusion, esxi
Weakness: CWE-908
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news1 stories

VMware releases security patches for a critical virtual machine escape flaw

Security AffairsNov 9, 20:48 UTC · Nov 9, 2018Vulnerability CVE-2018-6981 CVE-2018-6982