Vulnerabilitycritical
VMware sandbox escape bugs are so critical, patches are released for end-of
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-22252 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller | 6.7 | 4% | ||
CVE-2024-22254+2 related CVEs | VMware ESXi contains an out-of-bounds write vulnerability | 8.2 group max | <1% |
From the original article
2 min read at arstechnica.com
VMware is urging customers to patch critical vulnerabilities that make it possible for hackers to break out of sandbox and hypervisor protections in all versions, including out-of-support ones, of VMware ESXi, Workstation, Fusion, and Cloud Foundation products. A constellation of four vulnerabilities—two carrying severity ratings of 9.
arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.