6.1
Medium
CVE-2026-22722 A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null…
Description
A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix'
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Workstation 25 | earliest → < 25H2u1 | 25H2u1 |
| Workstation 17.0 | 17.0 → < 25H2u1 | 25H2u1 |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of Workstation
The 53 CVEs of Workstation →
CVE-2026-41703
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability
7.6
High
CVE-2026-22717
Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with…
2.7
Low
CVE-2026-22716
Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with…
5.0
Medium
CVE-2026-22715
VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A…
5.9
Medium