5.9Media

CVE-2026-22715VMware Workstation/Fusion NAT vulnerability

VMware Workstation; VMware Fusion Publicada: (hace 8 meses)

Descripción

VMWare Workstation and Fusion contain a logic flaw in the management of network packets.  Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's.  Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1

Debilidad (CWE): CWE-923

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
VMware Fusion 13.0 – < 25H2U1, fixed 25H2U1
VMware Workstation 17.0 – < 25H2U1, fixed 25H2U1

Referencias y parches