CVE-2026-22722

A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix'

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 4.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Un actor malicioso con privilegios de usuario autenticado en un host de estación de trabajo basado en Windows podría causar un error de desreferencia de puntero nulo. Para remediar CVE-2026-22722, aplique los parches listados en la columna "Versión corregida" de la 'Matriz de respuesta'.

26 Feb 2026, 19:32

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-02-26 19:32

Updated : 2026-06-17 10:20

NVD link : CVE-2026-22722

Mitre link : CVE-2026-22722

CVE.ORG link : CVE-2026-22722

JSON object : View

Products Affected

No product.

CWE

CWE-476

NULL Pointer Dereference

{"id": "CVE-2026-22722", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22722", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-27T17:54:08.869726Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "VMware", "product": "Workstation", "versions": [{"status": "affected", "version": "17.0", "lessThan": "25H2u1", "versionType": "custom"}, {"status": "unaffected", "version": "25H2u1", "versionType": "custom"}], "platforms": ["Windows"], "packageName": "VMware Workstation", "defaultStatus": "affected"}]}], "published": "2026-02-26T19:32:38.057", "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986", "source": "security@vmware.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@vmware.com", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'"}, {"lang": "es", "value": "Un actor malicioso con privilegios de usuario autenticado en un host de estaci\u00f3n de trabajo basado en Windows podr\u00eda causar un error de desreferencia de puntero nulo. Para remediar CVE-2026-22722, aplique los parches listados en la columna \"Versi\u00f3n corregida\" de la 'Matriz de respuesta'."}], "lastModified": "2026-06-17T10:20:18.033", "sourceIdentifier": "security@vmware.com"}