CVE-2026-22717 — VMware Workstation out-of-bound read vulnerability

CVE-2026-22717

VMware Workstation out-of-bound read vulnerability PUBLISHED

Description (CNA)

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed.

Affected (CNA)

Vendor / product	Versions
VMware / Workstation	affected 25H2 before 25H1U1

CWE

CWE-125

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.