5.9Mittel

CVE-2026-22715VMware Workstation/Fusion NAT vulnerability

VMware Workstation; VMware Fusion Veröffentlicht: (vor 8 Monaten)

Beschreibung

VMWare Workstation and Fusion contain a logic flaw in the management of network packets.  Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's.  Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1

Schwachstellentyp (CWE): CWE-923

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
VMware Fusion 13.0 – < 25H2U1, fixed 25H2U1
VMware Workstation 17.0 – < 25H2U1, fixed 25H2U1

Referenzen und Patches