VMware Workstation vulnerabilities

CVEs per yearBy the year they were published

1. 201716
2. 20188
3. 20193
4. 202012
5. 20231
6. 20256
7. 20265

Known exploitedNewest addition to KEV first

• CVE-2025-22224

  VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local…

  VMware · ESXi

  ExploitedCritical9.3

Newest CVEs

• CVE-2026-41703

  Out-of-bounds read vulnerability

  VMware · Cloud Foundation

  High7.6
• CVE-2026-22717

  VMware Workstation out-of-bound read vulnerability

  VMware · Workstation

  Low2.7
• CVE-2026-22716

  VMware Workstation out-of-bounds write vulnerability

  VMware · Workstation

  Medium5.0
• CVE-2026-22722

  VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash

  VMware · Workstation

  Medium6.1
• CVE-2026-22715

  VMware Workstation/Fusion NAT vulnerability

  VMware · Workstation

  Medium5.9
• CVE-2025-41239

  vSockets information-disclosure vulnerability

  VMware · ESXi

  High7.1
• CVE-2025-41238

  PVSCSI heap-overflow vulnerability

  VMware · ESXi

  Critical9.3
• CVE-2025-41237

  VMCI integer-underflow vulnerability

  VMware · Cloud Foundation

  Critical9.3
• CVE-2025-41236

  VMXNET3 integer-overflow vulnerability

  VMware · ESXi

  Critical9.3
• CVE-2025-41227

  Denial-of-Service Vulnerability

  VMware · ESXi

  Medium5.5