Skip to content
fr Sign in
8.8 High

CVE-2024-38811 VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment…

Description

VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment variable. A malicious actor with standard user privileges may exploit this vulnerability to execute code in the context of the Fusion application.

Affected products and versions

Product Affected versions Fixed in
Fusion 13 13.x → < 13.6 13.6
Fusion 13.0 13.0 → < 13.6 13.6

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fusion

The 2 CVEs of Fusion →
CVE-2020-4004 VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG),… Not rated
Track this CVE