- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/22/2026, Workstation recorded 1 security vulnerability in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Workstation and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-41703Out-of-bounds read vulnerabilityCVE-2026-22717VMware Workstation out-of-bound read vulnerabilityCVE-2026-22716VMware Workstation out-of-bounds write vulnerabilityCVE-2026-22722VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crashCVE-2026-22715VMware Workstation/Fusion NAT vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-41703Out-of-bounds read vulnerability | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-22717VMware Workstation out-of-bound read vulnerability | Exploitation statusNot exploited | FixYes | Published02/27/2026 | SeverityLow |
CVE-2026-22716VMware Workstation out-of-bounds write vulnerability | Exploitation statusNot exploited | FixYes | Published02/27/2026 | SeverityMedium |
CVE-2026-22722VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash | Exploitation statusNot exploited | FixYes | Published02/26/2026 | SeverityMedium |
CVE-2026-22715VMware Workstation/Fusion NAT vulnerability | Exploitation statusNot exploited | FixYes | Published02/26/2026 | SeverityMedium |
CVE-2025-41239vSockets information-disclosure vulnerability | Exploitation statusNot exploited | FixYes | Published07/15/2025 | SeverityHigh |
CVE-2025-41238PVSCSI heap-overflow vulnerability | Exploitation statusNot exploited | FixYes | Published07/15/2025 | SeverityCritical |
CVE-2025-41237VMCI integer-underflow vulnerability | Exploitation statusNot exploited | FixYes | Published07/15/2025 | SeverityCritical |
CVE-2025-41236VMXNET3 integer-overflow vulnerability | Exploitation statusNot exploited | FixYes | Published07/15/2025 | SeverityCritical |
CVE-2025-41227Denial-of-Service Vulnerability | Exploitation statusNot exploited | FixYes | Published05/20/2025 | SeverityMedium |
226 Results | Page 1 of 23