vmware cloud-foundation CVE-2021-22041 vulnerability in VMware Products
Published on February 16, 2022

VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

NVD


Products Associated with CVE-2021-22041

Want to know whenever a new CVE is published for VMware products? stack.watch will email you.

VMware Cloud Foundation
VMware Fusion
VMware Workstation
VMware ESXi

Exploit Probability

EPSS
0.57%
Percentile
47.62%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.