CVE-2018-6963

CVE-2018-6963 describes multiple denial-of-service vulnerabilities stemming from NULL pointer dereferences in the RPC handler of VMware Workstation (versions 14.x prior to 14.1.2) and Fusion (versions 10.x prior to 10.1.2). An attacker with limited guest machine privileges could exploit these flaws to trigger a denial-of-service condition on the guest machine. Rated Medium severity with a CVSS score of 5.5, the attack requires local access and has low complexity, impacting availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received minimal community discussion and media coverage.