7.1
High
CVE-2024-22269 VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious…
Description
VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Workstation 17 | 17.x → < 17.5.2 | 17.5.2 |
| VMware Fusion 13 | 13.x → < 13.5.2 | 13.5.2 |
| vmware_workstation | 17.0.0 | No fix stated |
| Fusion | 13.0.0 | No fix stated |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of VMware Workstation
The 14 CVEs of VMware Workstation →
CVE-2025-22226
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
7.1
High
CVE-2024-22273
The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious…
8.1
High
CVE-2024-22270
VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS)…
7.1
High
CVE-2024-22268
VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious…
7.1
High