CVE-2021-22045

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation. A malicious actor with access to a virtual machine with CD-ROM device emulation may be able to exploit this vulnerability in conjunction with other issues to execute code on the hypervisor from a virtual machine.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	VMware ESXi, VMware Workstation and VMware Fusion	VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0)

References

http://packetstormsecurity.com/files/165440/VMware-Security-Advisory-2022-0001.htmlThird Party Advisory, VDB Entry
https://www.vmware.com/security/advisories/VMSA-2022-0001.htmlVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-003/Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/165440/VMware-Security-Advisory-2022-0001.htmlThird Party Advisory, VDB Entry
https://www.vmware.com/security/advisories/VMSA-2022-0001.htmlVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-003/Third Party Advisory, VDB Entry

Timeline

Published: Jan 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-220475.3In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers CVE-2021-220488.8The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A CVE-2021-220499.8The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability in the vSAN Web Client (vSAN UI) plug-in. A CVE-2021-22059.1Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are CVE-2021-220507.5ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to ESXi may exploit this CVE-2021-220516.5Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream servi CVE-2021-220538.8Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted CVE-2021-220547.5VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5 CVE-2021-220555.3The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert m CVE-2021-220567.5VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malici CVE-2021-220578.8VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability. A malicious actor, who has successfu CVE-2021-22068.2Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected ar