https://www.vmware.com/security/advisories/VMSA-2022-0033.html

VMware ESXi contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. The exploitation is contained within the VMX sandbox. (CVE-2022-31705)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

VMware Fusion 12.0.x < 12.2.5 installed on the remote macOS or Mac OS X host contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. (CVE-2022-31705)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

VMware Workstation 16.0.x < 16.2.5 contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. (CVE-2022-31705)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
169513	VMware ESXi 7.0 / 8.0 Heap Out-of-bounds Write (VMSA-2022-0033)	Nessus	Misc.	high
169512	VMware Fusion 12.0.x < 12.2.5 Heap Out-of-bounds Write (VMSA-2022-0033)	Nessus	MacOS X Local Security Checks	high
169511	VMware Workstation 16.0.x < 16.2.5 Heap Out-of-bounds Write (VMSA-2022-0033)	Nessus	General	high

CVE-2022-31705

high

Tenable Plugins

high

high

high