5.9Media
CVE-2026-22715VMware Workstation/Fusion NAT vulnerability
Descripción
VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's. Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1
Debilidad (CWE):
CWE-923
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| VMware | Fusion | 13.0 – < 25H2U1, fixed 25H2U1 | |
| VMware | Workstation | 17.0 – < 25H2U1, fixed 25H2U1 |