CVE-2026-22722

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-22722", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "state": "PUBLISHED", "assignerShortName": "vmware", "dateReserved": "2026-01-09T06:54:36.841Z", "datePublished": "2026-02-26T18:35:20.563Z", "dateUpdated": "2026-02-27T17:54:16.126Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "packageName": "VMware Workstation", "platforms": ["Windows"], "product": "Workstation", "vendor": "VMware", "versions": [{"lessThan": "25H2u1", "status": "affected", "version": "17.0", "versionType": "custom"}, {"status": "unaffected", "version": "25H2u1", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Broadcom would like to thank dread (d7ead) for reporting this issue to us."}], "datePublic": "2026-02-26T07:33:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'</p>"}], "value": "A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2026-02-26T18:37:46.113Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'</p>"}], "value": "To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'"}], "source": {"discovery": "UNKNOWN"}, "title": "VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-27T17:54:08.869726Z", "id": "CVE-2026-22722", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-27T17:54:16.126Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22722", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-27T17:54:08.869726Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-27T17:54:12.764Z"}}], "cna": {"title": "VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "reporter", "value": "Broadcom would like to thank dread (d7ead) for reporting this issue to us."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "VMware", "product": "Workstation", "versions": [{"status": "affected", "version": "17.0", "lessThan": "25H2u1", "versionType": "custom"}, {"status": "unaffected", "version": "25H2u1", "versionType": "custom"}], "platforms": ["Windows"], "packageName": "VMware Workstation", "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'", "supportingMedia": [{"type": "text/html", "value": "<p>To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'</p>", "base64": false}]}], "datePublic": "2026-02-26T07:33:00.000Z", "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'", "supportingMedia": [{"type": "text/html", "value": "<p>A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2026-02-26T18:37:46.113Z"}}}, "cveMetadata": {"cveId": "CVE-2026-22722", "state": "PUBLISHED", "dateUpdated": "2026-02-27T17:54:16.126Z", "dateReserved": "2026-01-09T06:54:36.841Z", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "datePublished": "2026-02-26T18:35:20.563Z", "assignerShortName": "vmware"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "packageName": "VMware Workstation", "platforms": ["Windows"], "product": "Workstation", "vendor": "VMware", "versions": [{"lessThan": "25H2u1", "status": "affected", "version": "17.0", "versionType": "custom"}, {"status": "unaffected", "version": "25H2u1", "versionType": "custom"}]}], "source": "security@vmware.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'"}, {"lang": "es", "value": "Un actor malicioso con privilegios de usuario autenticado en un host de estaci\u00f3n de trabajo basado en Windows podr\u00eda causar un error de desreferencia de puntero nulo. Para remediar CVE-2026-22722, aplique los parches listados en la columna \"Versi\u00f3n corregida\" de la 'Matriz de respuesta'."}], "id": "CVE-2026-22722", "lastModified": "2026-06-17T10:20:18.033", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 4.2, "source": "security@vmware.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22722", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-27T17:54:08.869726Z", "version": "2.0.3"}}]}, "published": "2026-02-26T19:32:38.057", "references": [{"source": "security@vmware.com", "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986"}], "sourceIdentifier": "security@vmware.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "security@vmware.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "[17.0,25H2u1)"}}, {"platform": ["windows"], "status": "unaffected", "versions": {"scheme": "generic", "value": "25H2u1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Workstation", "source": "cna", "vendor": "VMware"}, "product": "workstation", "vendor": "vmware"}], "analysis": {"en": {"generated_at": "2026-04-18T17:35:39.808543+00:00", "value": {"mitigation_remediation": ["Update VMware Workstation to a version that includes the fixed patches listed in the Response Matrix.", "Restrict VMware Workstation usage to trusted authenticated users and enforce least\u2011privilege policies.", "Enable monitoring and alerting for VMware Workstation crashes to detect potential exploitation attempts."], "summary": {"action": "Patch Immediately", "impact": "Denial of Service"}, "threat_synthesis": {"affected_systems": "VMware Workstation software running on Windows operating systems is affected. Specific version information is not provided in the advisory; any installations of VMware Workstation that have not applied the advertised patches are vulnerable.", "description_and_impact": "A null pointer dereference in VMware Workstation for Windows can cause a software crash when an authenticated user triggers it, leading to a loss of service for the workstation. This flaw does not enable code execution or data exfiltration but results in a denial of service for the local host. The weakness is classified as CWE\u2011476.", "risk_and_exploitability": "The CVSS score of 6.1 indicates a medium severity. The EPSS score is reported as less than 1%, suggesting exploitation is unlikely but still possible in environments where an attacker has local authenticated access. Because the flaw requires local authentication and is not listed in the CISA KEV catalog, the risk is moderate with low probability of exploitation."}}}}, "created": "2026-02-27T09:07:12.843558+00:00", "updated": "2026-04-18T17:45:06.054327+00:00", "vendors": ["vmware", "vmware$PRODUCT$workstation"]}