CVE-2026-22722CWE-476

VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash

Medium · published February 26, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix'

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-02-26T18:35Z
EPSS history
Timeline
  • 26 FEB 18:35Z
    VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash
    cvelistv5