CVE-2026-22715

MEDIUM EPSS 10.4%

Published Feb 26, 20264mo ago · Modified Apr 15, 20262mo ago

5.9 CVSS 3.1

Medium

Published Feb 26, 2026 4mo ago

Last Modified Apr 15, 2026 2mo ago

Description

VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's. Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1

CVSS Details

Base Score

5.9

Exploitability

1.6

Impact

4.2

Vector string

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L

Attack Vector Adjacent

Attack Complexity High

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality None

Integrity High

Availability Low

Threat Intelligence

EPSS Exploit Probability

10.4% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-923

References 1

support.broadcom.com https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.