Low2.7VMware (Broadcom)

Workstation: Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-adminis…

CVE-2026-22717 Published Feb 27, 2026Updated by vendor Jun 17, 2026

CVE-2026-22717

Affected products & platforms

VMware (Broadcom)Workstation & Fusion

Summary

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed.

Mitigation

Mitigation steps weren't captured by the parser for this advisory — this is a parsing gap, not a statement that no fix exists. Read the vendor advisory below for the authoritative guidance.

Official advisory · medium-confidence parse· fetched 7 hours ago·verify at source

Source evidence

What VulniPulse actually used to build this record — and why.

VMware Security Advisories (VMSA) via NVDofficial
Official vendor feed — the source of truth for this advisory. VulniPulse polled this feed and parsed this entry from it.
VMware (Broadcom)

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2026-22717NVD CVE.org MITRE

Official resources

Workstation / Fusion downloads
Official documentation
Desktop hypervisor updates ship through Broadcom's support downloads portal.
Broadcom / VMware Security Advisories (VMSA)
Official documentation
Canonical VMSA portal — full advisory text, response matrix and fixed-version tables.
VMware docs on Broadcom TechDocs
Official documentation
Official VMware product documentation, including upgrade and patching guides.

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.