CVE-2022-22942: VMware Photon OS

High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days.

The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer.

Affected products

• VMware Photon OS: version 3.0 only; version 4.0 only

Published 2023-12-13. Last modified 2026-06-17.