VMware Workstation Out-of-Bounds Read Vulnerability Allowing Limited Information Disclosure

A vulnerability allowing out-of-bounds read has been identified in VMware Workstation versions 25H1 and prior. This vulnerability allows an actor with non-administrative privileges on a guest virtual machine to access limited information from the host machine where VMware Workstation is installed.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure from the host machine.

Remediation

Users can upgrade to VMware Workstation 25H2u1 to address this vulnerability. This version is available through the VMware Workstation Pro 25H2 for Windows and Linux product pages on the Broadcom Support site.