CVE-2026-22717

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
2.7LOW
EPSS
0.0%
top 99.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Vmware Workstation
Timeline
PublishedFeb 27

Description

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:NExploitability: 1.0 | Impact: 1.4

Affected Packages1 packages

▶CVEListV5vmware/workstation25H2 — 25H1U1

🔴Vulnerability Details

2
CVEList
VMware Workstation out-of-bound read vulnerability↗2026-02-27
▶
GHSA
GHSA-5cgj-fvvm-2jc2: Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM↗2026-02-27
▶
CVE-2026-22717 (LOW CVSS 2.7) | Out-of-bound read vulnerability in | cvebase.io