An out‑of‑bound read flaw exists in VMware Workstation versions 25H1 and earlier. The flaw allows a guest VM user with non‑administrative privileges to read memory beyond intended bounds in the host process, exposing a small amount of sensitive data from the host. This is a classic CWE‑125 overflow that can lead to limited disclosure of host‑side information but does not provide code execution or denial of service.

VMware Workstation, all platforms, versions 25H1 and earlier.

The vulnerability scores 2.7 on the CVSS scale, indicating only low to medium severity, and the EPSS score is below 1%, showing a very low probability of exploitation. It is not in the CISA Known Exploited Vulnerabilities catalog. The attack requires a local guest user running a virtual machine and does not need administrative or network privileges on the host. Because the disclosed data is limited, the overall risk to confidentiality is moderate and would normally be mitigated by preventing escalation of local guest privileges or by applying the vendor patch.