© 2026 vulntracker.io

CVE-2021-22045

HIGH

7.8

CVSS Score

Published: January 4, 2022 at 09:39 PM UTC

Updated: June 17, 2026 at 03:36 AM UTC

4 products affected across 1 vendorWorkstationCloud FoundationESXi· also runs on 1 platform

Using VMware ESXi, VMware Workstation and VMware Fusion by N/A?

Get instant alerts when new vulnerabilities affect VMware ESXi, VMware Workstation and VMware Fusion - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 5%

Description

VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation. A malicious actor with access to a virtual machine with CD-ROM device emulation may be able to exploit this vulnerability in conjunction with other issues to execute code on the hypervisor from a virtual machine.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Cloud Foundation · VMware

95%

3.0 ≤ v ≤ 3.10.2.24.0 ≤ v ≤ 4.3.1

95%

6.5 6.5 650-201701001 6.5 650-201703001 6.5 650-201703002 6.5 650-201704001 6.5 650-201707101 6.5 650-201707102 6.5 650-201707103 6.5 650-201707201 6.5 650-201707202 6.5 650-201707203 6.5 650-201707204 6.5 650-201707205 6.5 650-201707206 6.5 650-201707207 6.5 650-201707208 6.5 650-201707209 6.5 650-201707210 6.5 650-201707211 6.5 650-201707212 6.5 650-201707213 6.5 650-201707214 6.5 650-201707215 6.5 650-201707216 6.5 650-201707217 6.5 650-201707218 6.5 650-201707219 6.5 650-201707220 6.5 650-201707221 6.5 650-201710001 6.5 650-201712001 6.5 650-201803001 6.5 650-201806001 6.5 650-201808001 6.5 650-201810001 6.5 650-201810002 6.5 650-201811001 6.5 650-201811002 6.5 650-201811301 6.5 650-201901001 6.5 650-201903001 6.5 650-201905001 6.5 650-201908001 6.5 650-201910001 6.5 650-20191004001 6.5 650-201911001 6.5 650-201911401 6.5 650-201911402 6.5 650-201912001 6.5 650-201912002 6.5 650-201912101 6.5 650-201912102 6.5 650-201912103 6.5 650-201912104 6.5 650-201912301 6.5 650-201912401 6.5 650-201912402 6.5 650-201912403 6.5 650-201912404 6.5 650-202005001 6.5 650-202006001 6.5 650-202007001 6.5 650-202010001 6.5 650-202011001 6.5 650-202011002 6.5 650-202102001 6.5 650-202102002 6.5 650-202102003 6.5 650-202107401 6.7 6.7 670-201806001 6.7 670-201807001 6.7 670-201808001 6.7 670-201810001 6.7 670-201810101 6.7 670-201810102 6.7 670-201810103 6.7 670-201810201 6.7 670-201810202 6.7 670-201810203 6.7 670-201810204 6.7 670-201810205 6.7 670-201810206 6.7 670-201810207 6.7 670-201810208 6.7 670-201810209 6.7 670-201810210 6.7 670-201810211 6.7 670-201810212 6.7 670-201810213 6.7 670-201810214 6.7 670-201810215 6.7 670-201810216 6.7 670-201810217 6.7 670-201810218 6.7 670-201810219 6.7 670-201810220 6.7 670-201810221 6.7 670-201810222 6.7 670-201810223 6.7 670-201810224 6.7 670-201810225 6.7 670-201810226 6.7 670-201810227 6.7 670-201810228 6.7 670-201810229 6.7 670-201810230 6.7 670-201810231 6.7 670-201810232 6.7 670-201810233 6.7 670-201810234 6.7 670-201811001 6.7 670-201901001 6.7 670-201901401 6.7 670-201901402 6.7 670-201901403 6.7 670-201903001 6.7 670-201904001 6.7 670-201904201 6.7 670-201904202 6.7 670-201904203 6.7 670-201904204 6.7 670-201904205 6.7 670-201904206 6.7 670-201904207 6.7 670-201904208 6.7 670-201904209 6.7 670-201904210 6.7 670-201904211 6.7 670-201904212 6.7 670-201904213 6.7 670-201904214 6.7 670-201904215 6.7 670-201904216 6.7 670-201904217 6.7 670-201904218 6.7 670-201904219 6.7 670-201904220 6.7 670-201904221 6.7 670-201904222 6.7 670-201904223 6.7 670-201904224 6.7 670-201904225 6.7 670-201904226 6.7 670-201904227 6.7 670-201904228 6.7 670-201904229 6.7 670-201905001 6.7 670-201906002 6.7 670-201908101 6.7 670-201908102 6.7 670-201908103 6.7 670-201908104 6.7 670-201908201 6.7 670-201908202 6.7 670-201908203 6.7 670-201908204 6.7 670-201908205 6.7 670-201908206 6.7 670-201908207 6.7 670-201908208 6.7 670-201908209 6.7 670-201908210 6.7 670-201908211 6.7 670-201908212 6.7 670-201908213 6.7 670-201908214 6.7 670-201908215 6.7 670-201908216 6.7 670-201908217 6.7 670-201908218 6.7 670-201908219 6.7 670-201908220 6.7 670-201908221 6.7 670-201911001 6.7 670-201912001 6.7 670-201912101 6.7 670-201912102 6.7 670-201912401 6.7 670-201912402 6.7 670-201912403 6.7 670-201912404 6.7 670-201912405 6.7 670-202004001 6.7 670-202004002 6.7 670-202004301 6.7 670-202004401 6.7 670-202004402 6.7 670-202004403 6.7 670-202004404 6.7 670-202004405 6.7 670-202004406 6.7 670-202004407 6.7 670-202004408 6.7 670-202006001 6.7 670-202008001 6.7 670-202010001 6.7 670-202011001 6.7 670-202011002 6.7 670-202102001 6.7 670-202103001 6.7 670-202111001 7.0 7.0 beta 7.0 update_1 7.0 update_1a 7.0 update_1b 7.0 update_1c 7.0 update_1d 7.0 update_2 7.0 update_2a 7.0 update_2c 7.0 update_2d VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0)

Fusion · VMware

95%

12.0.0 ≤ v < 12.2.0VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0)

Affected range stops below 12.2.0, so it looks safe — our inference, not a vendor statement

apple-macos (environment)

Workstation · VMware

95%

16.0.0 ≤ v < 16.2.0VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0)

Affected range stops below 16.2.0, so it looks safe — our inference, not a vendor statement

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

95%

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.vmware.com/security/advisories/VMSA-2022-0001.html

References (3)

x_refsource_MISCThird Party AdvisoryVDB Entry

Source: [email protected]

http://packetstormsecurity.com/files/165440/VMware-Security-Advisory-2022-0001.html

x_refsource_MISCVendor Advisory

Source: [email protected]

https://www.vmware.com/security/advisories/VMSA-2022-0001.html

x_refsource_MISCThird Party AdvisoryVDB Entry

Source: [email protected]

https://www.zerodayinitiative.com/advisories/ZDI-22-003/

CVSS

7.8HIGH[email protected]

Attack Vector: LOCAL
Complexity: HIGH
Privileges: LOW
User Interaction: NONE
Scope: CHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-787

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card