cve-2022-31705

CVE-2022-31705 Introducción https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Probado en Windows VMware Workstation 16.2.0, con sistema operativo invitado Ubuntu Server 22 Al menos un dispositivo USB debe estar conectado a la máquina...

CVE-2026-59346-POC

CVE-2026-59346 — VMXNET3 TSO 整数溢出（VMware Workstation / Fusion） 针对 vmware-vmx 中 VMXNET3 虚拟网卡 TSO 分段路径的 32 位整数溢出的概念验证，可从客户机 VM 触发。 此问题已修补。 该 PoC 仅出于研究和防御目的发布。它会触发主机端崩溃（SIGSEGV），并不尝试执行代码。 | ---|--- CVE| CVE-2026-59346 分析文章| cyberstan.co.uk/vmxnet3-tso-overflow ZDI 公告| ZDI-26-647 厂商公告| VMSA-2026-0007...

network-security-lab

🔬 ネットワークセキュリティラボ 実際の攻撃・防御シナリオをシミュレートする制御済み仮想環境 📋 概要 このラボは、完全に隔離された仮想環境において、実際のペネトレーションテストと防御強化演習をシミュレートします。偵察から悪用に至るまでの攻撃セキュリティライフサイクルと、各リスクを軽減する防御制御を実証します。 主な成果: 既知のバックドアを悪用し、資格情報や特別なツールを使用せずに、60秒未満で対象マシンの完全なrootアクセスを達成しました。 🏗 ラボ環境 コンポーネント| 詳細 ---|--- ハイパーバイザー| VMware Workstation ネットワーク| Host-On...

metasploitable-penetration-testing-lab

🔐 Metasploitable 2 ペネトレーションテストラボ 隔離された仮想環境内での脆弱性発見、悪用、侵害後確認、防御的緩和策を実証する、管理されたサイバーセキュリティラボプロジェクト。 📌 プロジェクト概要 このプロジェクトは、管理された仮想ラボで実施される実際のペネトレーションテストをシミュレートします。 目的は、脆弱なシステム上の公開サービスを特定し、重大な脆弱性を検出し、管理された悪用を実行し、システム侵害を確認し、緩和戦略を実装することでした。 このプロジェクトは、攻撃的および防御的なサイバーセキュリティ能力の両方を示しています。 🏗 ラボ環境 ホストシステム:...

vmware-exploitation

VMware 漏洞利用 与 VMware 逃逸漏洞利用相关的链接合集。 欢迎提交 Pull Request。 在 Twitter 上关注 @andreyknvl 或在 Mastodon 上关注 @[email protected] 以获取更新通知。 研究 2024 "串联 N-day 漏洞以攻陷一切": "第 4 部分 — VMware Workstation 信息泄漏", "第 5 部分 — VMware Workstation 客户机到宿主机逃逸" 文章 "揭示虚拟化的裂缝，掌控宿主机系统 — VMware Workstation 逃逸" 幻灯片 "我发现的 VMWare...

PT-2026-85031

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1 Description An integer overflow exists in the VMXNET3 virtual network adapter within the hypervisor. A malicious actor with local administrative privileges...

PT-2026-85032

Broadcom has fixed Critical security vulnerabilities in VMware Workstation and Fusion. CVE-2026-59346 CVE-2026-59347 https://t.co/OY9uOeyBn8...

VMware Workstation 25H2, 26H1.x < 26H1u1 Multiple Vulnerabilities (VMSA-2026-0007)

The version of VMware Workstation installed on the remote host is 25H2, 26H1.x prior to 26H1u1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...

PT-2026-65829

Name of the Vulnerable Software and Affected Versions VMware ESX affected versions not specified Description An out-of-bounds write issue exists in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine using the VMXNET3 adapter can exploi...

VMware Workstation 25.x < 26.0.0 Vulnerability (VMSA-2026-0006)

The version of VMware Workstation installed on the remote host is 25.x 25H2 prior to 26.0.0 26H1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

PT-2026-65833

Name of the Vulnerable Software and Affected Versions VMware vCenter versions prior to 9.1.0.0300 VMware vCenter versions prior to 9.0.2.0100 VMware vCenter versions prior to 8.0 U3k VMware vCenter versions prior to 8.0 U2f Description VMware vCenter contains a directory traversal flaw in the...

PT-2026-65832

Name of the Vulnerable Software and Affected Versions VMware vCenter affected versions not specified Description An authentication bypass exists in the VMware Directory Service. A malicious actor with network access to vCenter can exploit this flaw to bypass authentication mechanisms and gain...

VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)

Advisory ID: | VMSA-2026-0006.2 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 2.7-9.8 Synopsis: | VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709 Issue date: | 2026-07-29...

VMware Workstation 17.x, 25H2 < 25H2u1 NULL Pointer Dereference (VMSA-2026-0002)

The version of VMware Workstation installed on the remote host is 17.x, 25H2.x prior to 25H2u1. It is, therefore, affected by a vulnerability: - A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error...

(Pwn2Own) VMware Workstation PVSCSI Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-22717

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed...

EUVD-2026-9050

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed...

EUVD-2026-9043

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed...

CVE-2026-22717

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed...

CVE-2026-22715

VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's. Resolution: To remediate CVE-2026-22715 plea...