Skip to content
fr Sign in
7.1 High

CVE-2024-22270 VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS)…

Description

VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.

Affected products and versions

Product Affected versions Fixed in
VMware Workstation 17 17.x → < 17.5.2 17.5.2
VMware Fusion 13 13.x → < 13.5.2 13.5.2
Workstation 17.5 earliest → < 17.5.2 17.5.2
Fusion 13.5 earliest → < 13.5.2 13.5.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of VMware Workstation

The 14 CVEs of VMware Workstation →
CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability 7.1 High CVE-2024-22273 The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious… 8.1 High CVE-2024-22269 VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious… 7.1 High CVE-2024-22268 VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious… 7.1 High
Track this CVE