CVE-2026-22715 — VMware Workstation/Fusion NAT vulnerability

CVE-2026-22715

VMware Workstation/Fusion NAT vulnerability PUBLISHED

Description (CNA)

VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's. Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1

Affected (CNA)

Vendor / product	Versions
VMware / Workstation	affected 17.0 before 25H2U1; unaffected 25H2U1
VMware / Fusion	affected 13.0 before 25H2U1; unaffected 25H2U1

CWE

No CWE identifiers supplied.

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.