cve-2022-31705

CVE-2022-31705 소개 https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Windows VMware Workstation 16.2.0에서 테스트, 게스트 OS는 Ubuntu Server 22 게스트 머신에 USB 장치가 하나 이상 연결되어 있어야 함 ehci.c 코드에서 'qh-field4' 변경 'sudo ./run.sh'를 입력하여 poc를 컴파일하고 실행 예제...

vmware-exploitation

VMware エクスプロイテーション VMware エスケープエクスプロイトに関連するリンク集です。 プルリクエストは歓迎します。 更新情報を受け取るには、Twitter で @andreyknvl を、Mastodon で @[email protected] をフォローしてください。 研究 2024 "N-day を連鎖させて全てを侵害する": "Part 4 — VMware Workstation 情報漏洩", "Part 5 — VMware Workstation ゲストからホストへのエスケープ" 記事 "仮想化の亀裂を暴き、ホストシステムを掌握する — VMwar...

CVE-2026-59346-POC

CVE-2026-59346 — VMXNET3 TSO 整数オーバーフロー VMware Workstation / Fusion vmware-vmx 内の VMXNET3 仮想 NIC の TSO セグメンテーションパスにおける 32 ビット整数オーバーフローの概念実証 PoC であり、ゲスト VM から到達可能です。 この問題は修正済みです。 この PoC は研究および防御目的のみで公開されています。ホスト側のクラッシュ SIGSEGV を引き起こすものであり、コード実行を試みるものではありません。 | ---|--- CVE| CVE-2026-59346 Writeup|...

network-security-lab

🔬 Network Security Lab A controlled virtual environment simulating real-world attack and defense scenarios 📋 Overview This lab simulates a real-world penetration test and defensive hardening exercise in a fully isolated virtual environment. It demonstrates the full offensive security lifecycle —...

metasploitable-penetration-testing-lab

🔐 Metasploitable 2 침투 테스트 연구실 격리된 가상 환경에서 취약점 발견, 익스플로잇, 사후 익스플로잇 검증, 방어적 완화를 보여주는 통제된 사이버보안 연구실 프로젝트입니다. 📌 프로젝트 개요 이 프로젝트는 통제된 가상 연구실에서 수행된 실제 침투 테스트 업무를 시뮬레이션합니다. 목표는 취약한 시스템의 노출된 서비스를 식별하고, 중요 취약점을 탐지하며, 통제된 익스플로잇을 수행하고, 시스템 장악을 검증하며, 완화 전략을 구현하는 것이었습니다. 이 프로젝트는 공격 및 방어 사이버보안 역량을 모두 보여줍니다. 🏗 실...

VMware Workstation 25H2, 26H1.x < 26H1u1 Multiple Vulnerabilities (VMSA-2026-0007)

The version of VMware Workstation installed on the remote host is 25H2, 26H1.x prior to 26H1u1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...

PT-2026-85032

Broadcom has fixed Critical security vulnerabilities in VMware Workstation and Fusion. CVE-2026-59346 CVE-2026-59347 https://t.co/OY9uOeyBn8...

PT-2026-85031

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1 Description An integer overflow exists in the VMXNET3 virtual network adapter within the hypervisor. A malicious actor with local administrative privileges...

VMware Workstation/Fusion NAT vulnerability: a guest VM admin can disrupt or intercept other guest VMs' network connections

VMware Workstation/Fusion NAT Network Packet Management Flaw Allows a Guest VM to Disrupt or Intercept Other Guest VMs' Network Connections CVE-2026-22715 Vulnerability Overview VMware Workstation and Fusion contain a logic flaw CWE-923, communication channel not correctly restricted to intended...

CVE-2026-41703 Out-of-bounds read vulnerability

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service DoS condition of the host process. On Workstation...

CVE-2026-41703: Out-of-bounds Read

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service DoS condition of the host process. On Workstation...

PT-2026-65829

Name of the Vulnerable Software and Affected Versions VMware ESX affected versions not specified Description An out-of-bounds write issue exists in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine using the VMXNET3 adapter can exploi...

VMware Workstation 25.x < 26.0.0 Vulnerability (VMSA-2026-0006)

The version of VMware Workstation installed on the remote host is 25.x 25H2 prior to 26.0.0 26H1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

PT-2026-65832

Name of the Vulnerable Software and Affected Versions VMware vCenter affected versions not specified Description An authentication bypass exists in the VMware Directory Service. A malicious actor with network access to vCenter can exploit this flaw to bypass authentication mechanisms and gain...

PT-2026-65833

Name of the Vulnerable Software and Affected Versions VMware vCenter versions prior to 9.1.0.0300 VMware vCenter versions prior to 9.0.2.0100 VMware vCenter versions prior to 8.0 U3k VMware vCenter versions prior to 8.0 U2f Description VMware vCenter contains a directory traversal issue in the...

VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)

Advisory ID: | VMSA-2026-0006.2 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 2.7-9.8 Synopsis: | VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709 Issue date: | 2026-07-29...

The vulnerability of Vmware Workstation hypervisor, related to writing beyond the buffer boundaries of memory, allows an attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of Vmware Workstation hypervisor is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of VMware Fusion and Vmware Workstation lies in the insufficient restrictions on network connections for certain endpoints, which allows attackers to interrupt or intercept network connections of other guest virtual machines.

The vulnerability of VMware Fusion and Vmware Workstation lies in the insufficient restrictions on network connections for specified endpoints. Exploiting this vulnerability allows a malicious actor to interrupt or intercept network connections to other guest virtual machines remotely...

VMware Workstation 17.x, 25H2 < 25H2u1 NULL Pointer Dereference (VMSA-2026-0002)

The version of VMware Workstation installed on the remote host is 17.x, 25H2.x prior to 25H2u1. It is, therefore, affected by a vulnerability: - A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error...

(Pwn2Own) VMware Workstation PVSCSI Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...