Vulnerability Spotlight: VMware Workstation 15 denial-of-service vulnerability
Summary: Piotr Bania of Cisco Talos discovered a denial-of-service vulnerability in VMware Workstation 15, version 15.5.0, build-14665864, where a specially crafted pixel shader file can trigger a crash. The flaw exists in VMware guest mode and causes the vmware-vmx.exe process on the host to crash, and Cisco Talos worked with VMware under its coordinated disclosure policy to resolve it and make an update available.
Key Takeaway: The crash originates inside a guest VM but takes down the host process, so an attacker with access to a guest can affect the machine running it. Snort rules 52269 and 52270 were issued for detection.
Read the original at Cisco Talos ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026