CVE-2018-6981

8.8 highEPSS 1.3%

High (8.8) in vmware. EPSS 1.3% chance of exploitation in the next 30 days.

VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-908
Published: 2018-12-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:esxi
vmware:fusion
vmware:workstation

References

http://www.securityfocus.com/bid/105881
http://www.securitytracker.com/id/1042054
http://www.securitytracker.com/id/1042055
https://www.vmware.com/security/advisories/VMSA-2018-0027.html
http://www.securityfocus.com/bid/105881

Check your stack JSON