Skip to content
Sign in
Not rated

CVE-2021-22040 VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller

Description

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

Affected products and versions

Product Affected versions Fixed in
VMware ESXi , Workstation, Fusion and VMware Cloud Foundation Versions not published

Other CVEs of VMware ESXi , Workstation, Fusion and VMware Cloud Foundation

The 2 CVEs of VMware ESXi , Workstation, Fusion and VMware Cloud Foundation →
CVE-2021-22041 VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller Not rated
Track this CVE