How severe is CVE-2015-3650?

CVE-2015-3650 has a CVSS 2.0 base score of 7.2, rated high severity.

Is CVE-2015-3650 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (37th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2015-3650?

CVE-2015-3650 primarily affects Vmware Player. In total, 25 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2015-3650?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2015-3650 published?

CVE-2015-3650 was published on 2015-07-10 and last updated on 2026-06-17.

CVE-2015-3650

CVE-2015-3650 is a high-severity vulnerability in Vmware Player with a CVSS 2.0 base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-284.

Key facts

Severity: High (CVSS 2.0 base score 7.2)
EPSS exploit prediction: 0% (37th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-284
Affected product: Vmware Player
Published: 2015-07-10
Last modified: 2026-06-17

Description

vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x and 6.x before 6.0.7 and 7.x before 7.1.1, and VMware Horizon Client 5.x local-mode before 5.4.2 on Windows does not provide a valid DACL pointer during the setup of the vprintproxy.exe process, which allows host OS users to gain host OS privileges by injecting a thread.

Frequently asked questions

What is CVE-2015-3650?: vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x and 6.x before 6.0.7 and 7.x before 7.1.1, and VMware Horizon Client 5.x local-mode before 5.4.2 on Windows does not provide a valid DACL pointer during the setup of the vprintproxy.exe process, which allows host OS users to gain host OS privileges by injecting a thread.
How severe is CVE-2015-3650?: CVE-2015-3650 has a CVSS 2.0 base score of 7.2, rated high severity.
Is CVE-2015-3650 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (37th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2015-3650?: CVE-2015-3650 primarily affects Vmware Player. In total, 25 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2015-3650?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2015-3650 published?: CVE-2015-3650 was published on 2015-07-10 and last updated on 2026-06-17.

References

Affected products (25)

cpe:2.3:a:vmware:player:5.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:6.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:6.0.5:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:6.0.6:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:7.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:player:7.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:10.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:10.0.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:10.0.3:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:10.0.4:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:10.0.5:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:10.0.6:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:11.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:11.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:horizon_view_client:5.4:*:*:*:*:*:*:*
cpe:2.3:a:vmware:horizon_view_client:5.4.1:*:*:*:*:*:*:*

More vulnerabilities in Vmware Player

CVE-2009-3732 — Critical (CVSS 10.0): Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers…
CVE-2008-3693 — Critical (CVSS 10.0): Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware…
CVE-2008-3696 — Critical (CVSS 10.0): Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware…
CVE-2008-3695 — Critical (CVSS 10.0): Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware…
CVE-2008-3692 — Critical (CVSS 10.0): Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware…
CVE-2008-3691 — Critical (CVSS 10.0): Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware…

All CVEs affecting Vmware Player →

Other CWE-284 (Improper Access Control) vulnerabilities

CVE-2026-50746 — Critical (CVSS 10.0): A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi…
CVE-2026-46978 — Critical (CVSS 10.0): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The…
CVE-2026-35308 — Critical (CVSS 10.0): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars).…
CVE-2026-35307 — Critical (CVSS 10.0): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that…
CVE-2026-46695 — Critical (CVSS 10.0): Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers…
CVE-2026-46840 — Critical (CVSS 10.0): Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are…

Browse all CWE-284 (Improper Access Control) vulnerabilities →