CVE-2026-22722 — VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash

CVE-2026-22722

VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash PUBLISHED

Description (CNA)

A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix'

Affected (CNA)

Vendor / product	Versions
VMware / Workstation	affected 17.0 before 25H2u1; unaffected 25H2u1

CWE

CWE-476

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.