CVE-2021-22040

No fix known EPSS <1%

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

Published 2022-02-16 · CVE record · OSV

Products: vmware cloud_foundation, vmware fusion, vmware workstation_player, vmware workstation_pro, vmware esxi