← Back

CVE-2021-22040

nvd nist
Published: Feb 16, 2022Modified: Jun 17, 2026

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

Affected (173)

Vmware
5 products
Cloud Foundation
Esxi
Fusion
Workstation Player
Workstation Pro
Configuration A
173 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Cloud Foundation
From 3.0 to 3.11
Cloud Foundation
From 4.0 to 4.4
Vmware
Esxi
Version 6.5
Esxi
Version 6.5 650-202202401
Esxi
Version 6.7
Esxi
Version 6.7 670-201806001
Esxi
Version 6.7 670-201807001
Esxi
Version 6.7 670-201808001
Esxi
Version 6.7 670-201810001
Esxi
Version 6.7 670-201810101
Esxi
Version 6.7 670-201810102
Esxi
Version 6.7 670-201810103
Esxi
Version 6.7 670-201810201
Esxi
Version 6.7 670-201810202
Esxi
Version 6.7 670-201810203
Esxi
Version 6.7 670-201810204
Esxi
Version 6.7 670-201810205
Esxi
Version 6.7 670-201810206
Esxi
Version 6.7 670-201810207
Esxi
Version 6.7 670-201810208
Esxi
Version 6.7 670-201810209
Esxi
Version 6.7 670-201810210
Esxi
Version 6.7 670-201810211
Esxi
Version 6.7 670-201810212
Esxi
Version 6.7 670-201810213
Esxi
Version 6.7 670-201810214
Esxi
Version 6.7 670-201810215
Esxi
Version 6.7 670-201810216
Esxi
Version 6.7 670-201810217
Esxi
Version 6.7 670-201810218
Esxi
Version 6.7 670-201810219
Esxi
Version 6.7 670-201810220
Esxi
Version 6.7 670-201810221
Esxi
Version 6.7 670-201810222
Esxi
Version 6.7 670-201810223
Esxi
Version 6.7 670-201810224
Esxi
Version 6.7 670-201810225
Esxi
Version 6.7 670-201810226
Esxi
Version 6.7 670-201810227
Esxi
Version 6.7 670-201810228
Esxi
Version 6.7 670-201810229
Esxi
Version 6.7 670-201810230
Esxi
Version 6.7 670-201810231
Esxi
Version 6.7 670-201810232
Esxi
Version 6.7 670-201810233
Esxi
Version 6.7 670-201810234
Esxi
Version 6.7 670-201811001
Esxi
Version 6.7 670-201901001
Esxi
Version 6.7 670-201901401
Esxi
Version 6.7 670-201901402
Esxi
Version 6.7 670-201901403
Esxi
Version 6.7 670-201903001
Esxi
Version 6.7 670-201904001
Esxi
Version 6.7 670-201904201-ug
Esxi
Version 6.7 670-201904201
Esxi
Version 6.7 670-201904202-ug
Esxi
Version 6.7 670-201904202
Esxi
Version 6.7 670-201904203-ug
Esxi
Version 6.7 670-201904203
Esxi
Version 6.7 670-201904204-ug
Esxi
Version 6.7 670-201904204
Esxi
Version 6.7 670-201904205-ug
Esxi
Version 6.7 670-201904205
Esxi
Version 6.7 670-201904206-ug
Esxi
Version 6.7 670-201904206
Esxi
Version 6.7 670-201904207-ug
Esxi
Version 6.7 670-201904207
Esxi
Version 6.7 670-201904208-ug
Esxi
Version 6.7 670-201904208
Esxi
Version 6.7 670-201904209-ug
Esxi
Version 6.7 670-201904209
Esxi
Version 6.7 670-201904210-ug
Esxi
Version 6.7 670-201904210
Esxi
Version 6.7 670-201904211-ug
Esxi
Version 6.7 670-201904211
Esxi
Version 6.7 670-201904212-ug
Esxi
Version 6.7 670-201904212
Esxi
Version 6.7 670-201904213-ug
Esxi
Version 6.7 670-201904213
Esxi
Version 6.7 670-201904214-ug
Esxi
Version 6.7 670-201904214
Esxi
Version 6.7 670-201904215-ug
Esxi
Version 6.7 670-201904215
Esxi
Version 6.7 670-201904216-ug
Esxi
Version 6.7 670-201904216
Esxi
Version 6.7 670-201904217-ug
Esxi
Version 6.7 670-201904217
Esxi
Version 6.7 670-201904218-ug
Esxi
Version 6.7 670-201904218
Esxi
Version 6.7 670-201904219-ug
Esxi
Version 6.7 670-201904219
Esxi
Version 6.7 670-201904220-ug
Esxi
Version 6.7 670-201904220
Esxi
Version 6.7 670-201904221-ug
Esxi
Version 6.7 670-201904221
Esxi
Version 6.7 670-201904222-ug
Esxi
Version 6.7 670-201904222
Esxi
Version 6.7 670-201904223-ug
Esxi
Version 6.7 670-201904223
Esxi
Version 6.7 670-201904224-ug
Esxi
Version 6.7 670-201904224
Esxi
Version 6.7 670-201904225-ug
Esxi
Version 6.7 670-201904225
Esxi
Version 6.7 670-201904226-ug
Esxi
Version 6.7 670-201904226
Esxi
Version 6.7 670-201904227-ug
Esxi
Version 6.7 670-201904227
Esxi
Version 6.7 670-201904228-ug
Esxi
Version 6.7 670-201904228
Esxi
Version 6.7 670-201904229-ug
Esxi
Version 6.7 670-201904229
Esxi
Version 6.7 670-201905001
Esxi
Version 6.7 670-201906002
Esxi
Version 6.7 670-201908101
Esxi
Version 6.7 670-201908102
Esxi
Version 6.7 670-201908103
Esxi
Version 6.7 670-201908104
Esxi
Version 6.7 670-201908201
Esxi
Version 6.7 670-201908202
Esxi
Version 6.7 670-201908203
Esxi
Version 6.7 670-201908204
Esxi
Version 6.7 670-201908205
Esxi
Version 6.7 670-201908206
Esxi
Version 6.7 670-201908207
Esxi
Version 6.7 670-201908208
Esxi
Version 6.7 670-201908209
Esxi
Version 6.7 670-201908210
Esxi
Version 6.7 670-201908211
Esxi
Version 6.7 670-201908212
Esxi
Version 6.7 670-201908213
Esxi
Version 6.7 670-201908214
Esxi
Version 6.7 670-201908215
Esxi
Version 6.7 670-201908216
Esxi
Version 6.7 670-201908217
Esxi
Version 6.7 670-201908218
Esxi
Version 6.7 670-201908219
Esxi
Version 6.7 670-201908220
Esxi
Version 6.7 670-201908221
Esxi
Version 6.7 670-201911001
Esxi
Version 6.7 670-201912001
Esxi
Version 6.7 670-201912101
Esxi
Version 6.7 670-201912102
Esxi
Version 6.7 670-201912401
Esxi
Version 6.7 670-201912402
Esxi
Version 6.7 670-201912403
Esxi
Version 6.7 670-201912404
Esxi
Version 6.7 670-201912405
Esxi
Version 6.7 670-202004001
Esxi
Version 6.7 670-202004002
Esxi
Version 6.7 670-202004301
Esxi
Version 6.7 670-202004401
Esxi
Version 6.7 670-202004402
Esxi
Version 6.7 670-202004403
Esxi
Version 6.7 670-202004404
Esxi
Version 6.7 670-202004405
Esxi
Version 6.7 670-202004406
Esxi
Version 6.7 670-202004407
Esxi
Version 6.7 670-202004408
Esxi
Version 6.7 670-202006001
Esxi
Version 6.7 670-202008001
Esxi
Version 6.7 670-202010001
Esxi
Version 6.7 670-202011001
Esxi
Version 6.7 670-202011002
Esxi
Version 6.7 670-202102001
Esxi
Version 6.7 670-202103001
Esxi
Version 6.7 670-202111101
Esxi
Version 7.0
Esxi
Version 7.0 update_1
Esxi
Version 7.0 update_2
Esxi
Version 7.0 update_3
Fusion
From 12.0.0 to 12.2.1
Workstation Player
From 16.0.0 to 16.2.1
Workstation Pro
From 16.0.0 to 16.2.1

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (2)

Source: security@vmware.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.