Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-22715

VMware Workstation/Fusion NAT vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

VMWare Workstation and Fusion contain a logic flaw in the management of network packets.  Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's.  Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware Workstation

Default version status: affected

  • 17.0 to < 25H2U1affected
  • 25H2U1unaffected

VMware Fusion

Default version status: affected

  • 13.0 to < 25H2U1affected
  • 25H2U1unaffected

References