9.3
Critique
CVE-2024-22267 VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with…
Description
VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| VMware Workstation 17 | 17.x → < 17.5.2 | 17.5.2 |
| VMware Fusion 13 | 13.x → < 13.5.2 | 13.5.2 |
| vmware_workstation 17.0 | 17.0 → < 17.5.2 | 17.5.2 |
| Fusion 13.0 | 13.0.0 → < 13.5.2 | 13.5.2 |
Références
- support.broadcom.com support.broadcom.com
Chronologie
- Publiée
- Dernière modification