CVE-2026-22716

MEDIUM EPSS 5.2%

Published Feb 27, 20264mo ago · Modified Apr 15, 20262mo ago

5.0 CVSS 3.1

Medium

Published Feb 27, 2026 4mo ago

Last Modified Apr 15, 2026 2mo ago

Description

Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to terminate certain Workstation processes.

CVSS Details

Base Score

5.0

Exploitability

1.8

Impact

2.7

Vector string

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L

Attack Vector Local

Attack Complexity Low

Privileges Required None

User Interaction Required

Scope Changed

Confidentiality None

Integrity Low

Availability Low

Threat Intelligence

EPSS Exploit Probability

5.2% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

References 1

support.broadcom.com https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.