5.9
Medium
CVE-2026-22715 VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A…
Description
VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's. Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Workstation 25 | earliest → < 25H2U1 | 25H2U1 |
| Workstation 17.0 | 17.0 → < 25H2U1 | 25H2U1 |
| Fusion 25 | earliest → < 25H2U1 | 25H2U1 |
| Fusion 13.0 | 13.0 → < 25H2U1 | 25H2U1 |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of Workstation
The 53 CVEs of Workstation →
CVE-2026-41703
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability
7.6
High
CVE-2026-22717
Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with…
2.7
Low
CVE-2026-22716
Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with…
5.0
Medium
CVE-2026-22722
A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null…
6.1
Medium