CVE-2026-22722: A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate…

PriorityP426medium6.1CVSS 3.1

AVLACLPRLUINSUCNILAH

EPSS

0.15%

4.5th percentile

A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix'

Affected

1 ranges

Vendor	Product	Version range	Fixed in
vmware	workstation	>= 17.0 < 25H2u1	25H2u1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.