What is the CVSS score of CVE-2026-22717?

CVE-2026-22717 has a CVSS 3.1 base score of 2.7 (Low). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of VMware are affected by CVE-2026-22717?

CVE-2026-22717 is a low-severity vulnerability involving out-of-bounds read (CVSS 2.7).

How to fix or mitigate CVE-2026-22717?

During next maintenance window: Apply vendor patches when convenient. Verify out-of-bounds read controls are in place.

VMware CVE-2026-22717

LOW

Out-of-bounds Read (CWE-125)

2026-02-27 security@vmware.com

VMware Information Disclosure

2.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

2.7 LOW

AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 27, 2026 - 20:21 nvd

LOW 2.7

DescriptionCVE.org

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed.

AnalysisAI

Technical ContextAI

Classified as CWE-125 (Out-of-bounds Read). Affects VMware Workstation 25H1 and below on any platform. Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed.