CVE-2026-22717
Received Received - Intake

Out-of-Bounds Read in VMware Workstation Allows Information Disclosure

Publication date: 2026-02-27

Last updated on: 2026-02-27

Assigner: VMware

Description
Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-27
Last Modified
2026-02-27
Generated
2026-07-26
AI Q&A
2026-02-27
EPSS Evaluated
2026-07-25
NVD
CVE-2026-22717
EUVD
EUVD-2026-9050

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
vmware workstation 25h1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bound read issue in VMware Workstation version 25H1 and earlier on any platform. It allows a user with non-administrative privileges inside a guest virtual machine to read limited information from the host machine where VMware Workstation is installed.

Detection Guidance

I don't know

Impact Analysis

The impact of this vulnerability is limited information disclosure from the host machine to a non-administrative user inside a guest VM. This means an attacker could gain some data from the host system without having full administrative access, potentially leading to privacy or security concerns.

Compliance Impact

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-22717. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart