CVE-2021-22040

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
vmwareCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
VendorProductVersion
vmwarecloud_foundation
3.0 ≤
𝑥
< 3.11
vmwarecloud_foundation
4.0 ≤
𝑥
< 4.4
vmwarefusion
12.0.0 ≤
𝑥
< 12.2.1
vmwareworkstation_player
16.0.0 ≤
𝑥
< 16.2.1
vmwareworkstation_pro
16.0.0 ≤
𝑥
< 16.2.1
vmwareesxi
6.5
vmwareesxi
6.5:650-202202401
vmwareesxi
6.7
vmwareesxi
6.7:670-201806001
vmwareesxi
6.7:670-201807001
vmwareesxi
6.7:670-201808001
vmwareesxi
6.7:670-201810001
vmwareesxi
6.7:670-201810101
vmwareesxi
6.7:670-201810102
vmwareesxi
6.7:670-201810103
vmwareesxi
6.7:670-201810201
vmwareesxi
6.7:670-201810202
vmwareesxi
6.7:670-201810203
vmwareesxi
6.7:670-201810204
vmwareesxi
6.7:670-201810205
vmwareesxi
6.7:670-201810206
vmwareesxi
6.7:670-201810207
vmwareesxi
6.7:670-201810208
vmwareesxi
6.7:670-201810209
vmwareesxi
6.7:670-201810210
vmwareesxi
6.7:670-201810211
vmwareesxi
6.7:670-201810212
vmwareesxi
6.7:670-201810213
vmwareesxi
6.7:670-201810214
vmwareesxi
6.7:670-201810215
vmwareesxi
6.7:670-201810216
vmwareesxi
6.7:670-201810217
vmwareesxi
6.7:670-201810218
vmwareesxi
6.7:670-201810219
vmwareesxi
6.7:670-201810220
vmwareesxi
6.7:670-201810221
vmwareesxi
6.7:670-201810222
vmwareesxi
6.7:670-201810223
vmwareesxi
6.7:670-201810224
vmwareesxi
6.7:670-201810225
vmwareesxi
6.7:670-201810226
vmwareesxi
6.7:670-201810227
vmwareesxi
6.7:670-201810228
vmwareesxi
6.7:670-201810229
vmwareesxi
6.7:670-201810230
vmwareesxi
6.7:670-201810231
vmwareesxi
6.7:670-201810232
vmwareesxi
6.7:670-201810233
vmwareesxi
6.7:670-201810234
vmwareesxi
6.7:670-201811001
vmwareesxi
6.7:670-201901001
vmwareesxi
6.7:670-201901401
vmwareesxi
6.7:670-201901402
vmwareesxi
6.7:670-201901403
vmwareesxi
6.7:670-201903001
vmwareesxi
6.7:670-201904001
vmwareesxi
6.7:670-201904201
vmwareesxi
6.7:670-201904201-ug
vmwareesxi
6.7:670-201904202
vmwareesxi
6.7:670-201904202-ug
vmwareesxi
6.7:670-201904203
vmwareesxi
6.7:670-201904203-ug
vmwareesxi
6.7:670-201904204
vmwareesxi
6.7:670-201904204-ug
vmwareesxi
6.7:670-201904205
vmwareesxi
6.7:670-201904205-ug
vmwareesxi
6.7:670-201904206
vmwareesxi
6.7:670-201904206-ug
vmwareesxi
6.7:670-201904207
vmwareesxi
6.7:670-201904207-ug
vmwareesxi
6.7:670-201904208
vmwareesxi
6.7:670-201904208-ug
vmwareesxi
6.7:670-201904209
vmwareesxi
6.7:670-201904209-ug
vmwareesxi
6.7:670-201904210
vmwareesxi
6.7:670-201904210-ug
vmwareesxi
6.7:670-201904211
vmwareesxi
6.7:670-201904211-ug
vmwareesxi
6.7:670-201904212
vmwareesxi
6.7:670-201904212-ug
vmwareesxi
6.7:670-201904213
vmwareesxi
6.7:670-201904213-ug
vmwareesxi
6.7:670-201904214
vmwareesxi
6.7:670-201904214-ug
vmwareesxi
6.7:670-201904215
vmwareesxi
6.7:670-201904215-ug
vmwareesxi
6.7:670-201904216
vmwareesxi
6.7:670-201904216-ug
vmwareesxi
6.7:670-201904217
vmwareesxi
6.7:670-201904217-ug
vmwareesxi
6.7:670-201904218
vmwareesxi
6.7:670-201904218-ug
vmwareesxi
6.7:670-201904219
vmwareesxi
6.7:670-201904219-ug
vmwareesxi
6.7:670-201904220
vmwareesxi
6.7:670-201904220-ug
vmwareesxi
6.7:670-201904221
vmwareesxi
6.7:670-201904221-ug
vmwareesxi
6.7:670-201904222
vmwareesxi
6.7:670-201904222-ug
vmwareesxi
6.7:670-201904223
vmwareesxi
6.7:670-201904223-ug
vmwareesxi
6.7:670-201904224
vmwareesxi
6.7:670-201904224-ug
vmwareesxi
6.7:670-201904225
vmwareesxi
6.7:670-201904225-ug
vmwareesxi
6.7:670-201904226
vmwareesxi
6.7:670-201904226-ug
vmwareesxi
6.7:670-201904227
vmwareesxi
6.7:670-201904227-ug
vmwareesxi
6.7:670-201904228
vmwareesxi
6.7:670-201904228-ug
vmwareesxi
6.7:670-201904229
vmwareesxi
6.7:670-201904229-ug
vmwareesxi
6.7:670-201905001
vmwareesxi
6.7:670-201906002
vmwareesxi
6.7:670-201908101
vmwareesxi
6.7:670-201908102
vmwareesxi
6.7:670-201908103
vmwareesxi
6.7:670-201908104
vmwareesxi
6.7:670-201908201
vmwareesxi
6.7:670-201908202
vmwareesxi
6.7:670-201908203
vmwareesxi
6.7:670-201908204
vmwareesxi
6.7:670-201908205
vmwareesxi
6.7:670-201908206
vmwareesxi
6.7:670-201908207
vmwareesxi
6.7:670-201908208
vmwareesxi
6.7:670-201908209
vmwareesxi
6.7:670-201908210
vmwareesxi
6.7:670-201908211
vmwareesxi
6.7:670-201908212
vmwareesxi
6.7:670-201908213
vmwareesxi
6.7:670-201908214
vmwareesxi
6.7:670-201908215
vmwareesxi
6.7:670-201908216
vmwareesxi
6.7:670-201908217
vmwareesxi
6.7:670-201908218
vmwareesxi
6.7:670-201908219
vmwareesxi
6.7:670-201908220
vmwareesxi
6.7:670-201908221
vmwareesxi
6.7:670-201911001
vmwareesxi
6.7:670-201912001
vmwareesxi
6.7:670-201912101
vmwareesxi
6.7:670-201912102
vmwareesxi
6.7:670-201912401
vmwareesxi
6.7:670-201912402
vmwareesxi
6.7:670-201912403
vmwareesxi
6.7:670-201912404
vmwareesxi
6.7:670-201912405
vmwareesxi
6.7:670-202004001
vmwareesxi
6.7:670-202004002
vmwareesxi
6.7:670-202004301
vmwareesxi
6.7:670-202004401
vmwareesxi
6.7:670-202004402
vmwareesxi
6.7:670-202004403
vmwareesxi
6.7:670-202004404
vmwareesxi
6.7:670-202004405
vmwareesxi
6.7:670-202004406
vmwareesxi
6.7:670-202004407
vmwareesxi
6.7:670-202004408
vmwareesxi
6.7:670-202006001
vmwareesxi
6.7:670-202008001
vmwareesxi
6.7:670-202010001
vmwareesxi
6.7:670-202011001
vmwareesxi
6.7:670-202011002
vmwareesxi
6.7:670-202102001
vmwareesxi
6.7:670-202103001
vmwareesxi
6.7:670-202111101
vmwareesxi
7.0
vmwareesxi
7.0:update_1
vmwareesxi
7.0:update_2
vmwareesxi
7.0:update_3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.vmware.com/security/advisories/VMSA-2022-0004.html
https://www.vmware.com/security/advisories/VMSA-2022-0004.html