CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22041

VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.2%

CVSS Severity

CVSS v3 Score 6.7

CVSS v2 Score 4.6

References

Products affected by CVE-2021-22041

Vmware » Cloud Foundation » Version: 3.0

cpe:2.3:a:vmware:cloud_foundation:3.0
Vmware » Cloud Foundation » Version: 3.0.1

cpe:2.3:a:vmware:cloud_foundation:3.0.1
Vmware » Cloud Foundation » Version: 3.0.1.1

cpe:2.3:a:vmware:cloud_foundation:3.0.1.1
Vmware » Cloud Foundation » Version: 3.10

cpe:2.3:a:vmware:cloud_foundation:3.10
Vmware » Cloud Foundation » Version: 3.10.1

cpe:2.3:a:vmware:cloud_foundation:3.10.1
Vmware » Cloud Foundation » Version: 3.10.1.1

cpe:2.3:a:vmware:cloud_foundation:3.10.1.1
Vmware » Cloud Foundation » Version: 3.10.1.2

cpe:2.3:a:vmware:cloud_foundation:3.10.1.2
Vmware » Cloud Foundation » Version: 3.10.2.1

cpe:2.3:a:vmware:cloud_foundation:3.10.2.1
Vmware » Cloud Foundation » Version: 3.10.2.2

cpe:2.3:a:vmware:cloud_foundation:3.10.2.2
Vmware » Cloud Foundation » Version: 3.5

cpe:2.3:a:vmware:cloud_foundation:3.5
Vmware » Cloud Foundation » Version: 3.5.1

cpe:2.3:a:vmware:cloud_foundation:3.5.1
Vmware » Cloud Foundation » Version: 3.7

cpe:2.3:a:vmware:cloud_foundation:3.7
Vmware » Cloud Foundation » Version: 3.7.1

cpe:2.3:a:vmware:cloud_foundation:3.7.1
Vmware » Cloud Foundation » Version: 3.7.2

cpe:2.3:a:vmware:cloud_foundation:3.7.2
Vmware » Cloud Foundation » Version: 3.8

cpe:2.3:a:vmware:cloud_foundation:3.8
Vmware » Cloud Foundation » Version: 3.8.1

cpe:2.3:a:vmware:cloud_foundation:3.8.1
Vmware » Cloud Foundation » Version: 3.9

cpe:2.3:a:vmware:cloud_foundation:3.9
Vmware » Cloud Foundation » Version: 3.9.1

cpe:2.3:a:vmware:cloud_foundation:3.9.1
Vmware » Cloud Foundation » Version: 4.0

cpe:2.3:a:vmware:cloud_foundation:4.0
Vmware » Cloud Foundation » Version: 4.0.1

cpe:2.3:a:vmware:cloud_foundation:4.0.1
Vmware » Cloud Foundation » Version: 4.1

cpe:2.3:a:vmware:cloud_foundation:4.1
Vmware » Cloud Foundation » Version: 4.1.0.1

cpe:2.3:a:vmware:cloud_foundation:4.1.0.1
Vmware » Cloud Foundation » Version: 4.2

cpe:2.3:a:vmware:cloud_foundation:4.2
Vmware » Cloud Foundation » Version: 4.2.1

cpe:2.3:a:vmware:cloud_foundation:4.2.1
Vmware » Cloud Foundation » Version: 4.3

cpe:2.3:a:vmware:cloud_foundation:4.3
Vmware » Cloud Foundation » Version: 4.3.1

cpe:2.3:a:vmware:cloud_foundation:4.3.1
Vmware » Cloud Foundation » Version: 4.3.11

cpe:2.3:a:vmware:cloud_foundation:4.3.11
Vmware » Fusion » Version: N/A

cpe:2.3:a:vmware:fusion:-
Vmware » Fusion » Version: 12.0.0

cpe:2.3:a:vmware:fusion:12.0.0
Vmware » Fusion » Version: 12.1.0

cpe:2.3:a:vmware:fusion:12.1.0
Vmware » Fusion » Version: 12.1.1

cpe:2.3:a:vmware:fusion:12.1.1
Vmware » Fusion » Version: 12.1.2

cpe:2.3:a:vmware:fusion:12.1.2
Vmware » Workstation » Version: 16.0.0

cpe:2.3:a:vmware:workstation:16.0.0
Vmware » Workstation » Version: 16.1.0

cpe:2.3:a:vmware:workstation:16.1.0
Vmware » Workstation » Version: 16.1.1

cpe:2.3:a:vmware:workstation:16.1.1
Vmware » Workstation » Version: 16.1.2

cpe:2.3:a:vmware:workstation:16.1.2
Vmware » Workstation » Version: 16.2.0

cpe:2.3:a:vmware:workstation:16.2.0
Vmware » Esxi » Version: 6.5

cpe:2.3:o:vmware:esxi:6.5
Vmware » Esxi » Version: 6.7

cpe:2.3:o:vmware:esxi:6.7
Vmware » Esxi » Version: 7.0

cpe:2.3:o:vmware:esxi:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22041

Products

Pricing

Contact Us