Description
VMWare Workstation and Fusion contain a logic flaw in the management of network packets.
Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's.
Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | Workstation | 17.0 – < 25H2U1 | 25H2U1 |
| VMware | Fusion | 13.0 – < 25H2U1 | 25H2U1 |
Advisories 1
- WID-SEC-2026-0528 VMware Workstation und Fusion: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 1, 2026