CVE-2021-22045

2022-01-0421:39:03

vmware

www.cve.org

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.1%

JSON

VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation. A malicious actor with access to a virtual machine with CD-ROM device emulation may be able to exploit this vulnerability in conjunction with other issues to execute code on the hypervisor from a virtual machine.

CNA Affected

[
  {
    "product": "VMware ESXi, VMware Workstation and VMware Fusion",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0)"
      }
    ]
  }
]