{"id":"CVE-2026-22722","aliases":["EUVD-2026-8877","GHSA-wgqq-4524-pjw8"],"status":"published","title":"VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash","description":"A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00167,"percentile":0.06,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-476"],"published":"2026-02-26T18:35:20Z","modified":"2026-06-17T10:20:18Z","exploits":[{"source":"pocgithub","id":"D7EAD/CVE-2026-22722","title":"D7EAD/CVE-2026-22722","date":"2026-03-06","url":"https://github.com/D7EAD/CVE-2026-22722"}],"products":[{"vendor":"vmware","product":"workstation"}],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22722"},{"url":"https://github.com/advisories/GHSA-wgqq-4524-pjw8"}],"sources":{"cve":[{"id":"CVE-2026-22722","title":"VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash","description":"A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'","status":"published","published":"2026-02-26T18:35:20.563Z","modified":"2026-02-27T17:54:16.126Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T13:39:05.585774Z"}],"euvd":[{"id":"EUVD-2026-8877","description":"A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'","status":"published","published":"2026-02-26T18:35:20Z","modified":"2026-02-27T17:54:16Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T19:48:13.609806Z"}],"ghsa":[{"id":"GHSA-wgqq-4524-pjw8","title":"A malicious actor with authenticated user privileges on a Windows based Workstation host may be...","description":"A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'","status":"published","published":"2026-02-26T21:31:30Z","modified":"2026-02-26T21:31:38Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:06:23.326773Z"}],"nvd":[{"id":"CVE-2026-22722","description":"A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'","status":"published","published":"2026-02-26T19:32:38.057Z","modified":"2026-06-17T10:20:18.033Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:12:07.027269Z"}]}}