9.3
Critical
CVE-2024-22267 VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with…
Description
VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Workstation 17 | 17.x → < 17.5.2 | 17.5.2 |
| VMware Fusion 13 | 13.x → < 13.5.2 | 13.5.2 |
| vmware_workstation 17.0 | 17.0 → < 17.5.2 | 17.5.2 |
| Fusion 13.0 | 13.0.0 → < 13.5.2 | 13.5.2 |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified