60
CVE-2024-22267
- CVSS 3.1
- 8.2 high
- EPSS
- <1%p50
- Published
- ·
- Modified
Description · NVD
VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
- Vendors
- vmware
- Products
- fusion, workstation
- Weakness
- CWE-416
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H