VMWare Workstation and Fusion contain a logic flaw in the management of network packets.
Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's.
Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1
Attack Parameters
Attack Vector
Adjacent
Нужен доступ к локальной сети
Attack Complexity
High
Сложно эксплуатировать
Privileges Required
None
Права не нужны
User Interaction
None
Не нужно действие пользователя
Impact Assessment
Confidentiality
None
Нет утечки данных
Integrity
High
Полная модификация данных
Availability
Low
Частичное нарушение работы
CVSS Vector v3.1