CVE-2021-22041
Published: Feb 16, 2022Modified: Jun 17, 2026
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD
Description
VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Affected (171)
Products: Vmware: Cloud Foundation, Esxi, Fusion, Workstation
Configuration A171 vulnerable
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.0 to 3.11 | |
| From 4.0 to 4.4 | |
| Version 6.5 650-202202401 | |
| Version 6.7 | |
| Version 6.7 670-201806001 | |
| Version 6.7 670-201807001 | |
| Version 6.7 670-201808001 | |
| Version 6.7 670-201810001 | |
| Version 6.7 670-201810101 | |
| Version 6.7 670-201810102 | |
| Version 6.7 670-201810103 | |
| Version 6.7 670-201810201 | |
| Version 6.7 670-201810202 | |
| Version 6.7 670-201810203 | |
| Version 6.7 670-201810204 | |
| Version 6.7 670-201810205 | |
| Version 6.7 670-201810206 | |
| Version 6.7 670-201810207 | |
| Version 6.7 670-201810208 | |
| Version 6.7 670-201810209 | |
| Version 6.7 670-201810210 | |
| Version 6.7 670-201810211 | |
| Version 6.7 670-201810212 | |
| Version 6.7 670-201810213 | |
| Version 6.7 670-201810214 | |
| Version 6.7 670-201810215 | |
| Version 6.7 670-201810216 | |
| Version 6.7 670-201810217 | |
| Version 6.7 670-201810218 | |
| Version 6.7 670-201810219 | |
| Version 6.7 670-201810220 | |
| Version 6.7 670-201810221 | |
| Version 6.7 670-201810222 | |
| Version 6.7 670-201810223 | |
| Version 6.7 670-201810224 | |
| Version 6.7 670-201810225 | |
| Version 6.7 670-201810226 | |
| Version 6.7 670-201810227 | |
| Version 6.7 670-201810228 | |
| Version 6.7 670-201810229 | |
| Version 6.7 670-201810230 | |
| Version 6.7 670-201810231 | |
| Version 6.7 670-201810232 | |
| Version 6.7 670-201810233 | |
| Version 6.7 670-201810234 | |
| Version 6.7 670-201811001 | |
| Version 6.7 670-201901001 | |
| Version 6.7 670-201901401 | |
| Version 6.7 670-201901402 | |
| Version 6.7 670-201901403 | |
| Version 6.7 670-201903001 | |
| Version 6.7 670-201904001 | |
| Version 6.7 670-201904201-ug | |
| Version 6.7 670-201904201 | |
| Version 6.7 670-201904202-ug | |
| Version 6.7 670-201904202 | |
| Version 6.7 670-201904203-ug | |
| Version 6.7 670-201904203 | |
| Version 6.7 670-201904204-ug | |
| Version 6.7 670-201904204 | |
| Version 6.7 670-201904205-ug | |
| Version 6.7 670-201904205 | |
| Version 6.7 670-201904206-ug | |
| Version 6.7 670-201904206 | |
| Version 6.7 670-201904207-ug | |
| Version 6.7 670-201904207 | |
| Version 6.7 670-201904208-ug | |
| Version 6.7 670-201904208 | |
| Version 6.7 670-201904209-ug | |
| Version 6.7 670-201904209 | |
| Version 6.7 670-201904210-ug | |
| Version 6.7 670-201904210 | |
| Version 6.7 670-201904211-ug | |
| Version 6.7 670-201904211 | |
| Version 6.7 670-201904212-ug | |
| Version 6.7 670-201904212 | |
| Version 6.7 670-201904213-ug | |
| Version 6.7 670-201904213 | |
| Version 6.7 670-201904214-ug | |
| Version 6.7 670-201904214 | |
| Version 6.7 670-201904215-ug | |
| Version 6.7 670-201904215 | |
| Version 6.7 670-201904216-ug | |
| Version 6.7 670-201904216 | |
| Version 6.7 670-201904217-ug | |
| Version 6.7 670-201904217 | |
| Version 6.7 670-201904218-ug | |
| Version 6.7 670-201904218 | |
| Version 6.7 670-201904219-ug | |
| Version 6.7 670-201904219 | |
| Version 6.7 670-201904220-ug | |
| Version 6.7 670-201904220 | |
| Version 6.7 670-201904221-ug | |
| Version 6.7 670-201904221 | |
| Version 6.7 670-201904222-ug | |
| Version 6.7 670-201904222 | |
| Version 6.7 670-201904223-ug | |
| Version 6.7 670-201904223 | |
| Version 6.7 670-201904224-ug | |
| Version 6.7 670-201904224 | |
| Version 6.7 670-201904225-ug | |
| Version 6.7 670-201904225 | |
| Version 6.7 670-201904226-ug | |
| Version 6.7 670-201904226 | |
| Version 6.7 670-201904227-ug | |
| Version 6.7 670-201904227 | |
| Version 6.7 670-201904228-ug | |
| Version 6.7 670-201904228 | |
| Version 6.7 670-201904229-ug | |
| Version 6.7 670-201904229 | |
| Version 6.7 670-201905001 | |
| Version 6.7 670-201906002 | |
| Version 6.7 670-201908101 | |
| Version 6.7 670-201908102 | |
| Version 6.7 670-201908103 | |
| Version 6.7 670-201908104 | |
| Version 6.7 670-201908201 | |
| Version 6.7 670-201908202 | |
| Version 6.7 670-201908203 | |
| Version 6.7 670-201908204 | |
| Version 6.7 670-201908205 | |
| Version 6.7 670-201908206 | |
| Version 6.7 670-201908207 | |
| Version 6.7 670-201908208 | |
| Version 6.7 670-201908209 | |
| Version 6.7 670-201908210 | |
| Version 6.7 670-201908211 | |
| Version 6.7 670-201908212 | |
| Version 6.7 670-201908213 | |
| Version 6.7 670-201908214 | |
| Version 6.7 670-201908215 | |
| Version 6.7 670-201908216 | |
| Version 6.7 670-201908217 | |
| Version 6.7 670-201908218 | |
| Version 6.7 670-201908219 | |
| Version 6.7 670-201908220 | |
| Version 6.7 670-201908221 | |
| Version 6.7 670-201911001 | |
| Version 6.7 670-201912001 | |
| Version 6.7 670-201912101 | |
| Version 6.7 670-201912102 | |
| Version 6.7 670-201912401 | |
| Version 6.7 670-201912402 | |
| Version 6.7 670-201912403 | |
| Version 6.7 670-201912404 | |
| Version 6.7 670-201912405 | |
| Version 6.7 670-202004001 | |
| Version 6.7 670-202004002 | |
| Version 6.7 670-202004301 | |
| Version 6.7 670-202004401 | |
| Version 6.7 670-202004402 | |
| Version 6.7 670-202004403 | |
| Version 6.7 670-202004404 | |
| Version 6.7 670-202004405 | |
| Version 6.7 670-202004406 | |
| Version 6.7 670-202004407 | |
| Version 6.7 670-202004408 | |
| Version 6.7 670-202006001 | |
| Version 6.7 670-202008001 | |
| Version 6.7 670-202010001 | |
| Version 6.7 670-202011001 | |
| Version 6.7 670-202011002 | |
| Version 6.7 670-202102001 | |
| Version 6.7 670-202103001 | |
| Version 6.7 670-202111101 | |
| Version 7.0 update_1 | |
| Version 7.0 update_2 | |
| Version 7.0 update_3 | |
| From 12.0.0 to 12.2.1 | |
| All versions | |
| From 16.0.0 to 16.2.1 |
References (2)
Source: security@vmware.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Timeline
No history available yet.