Vulnerabilitycritical
VMware Patches Severe Security Flaws in Workstation and Fusion Products
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-22252 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller | 6.7 | 4% | ||
| CVE-2024-22253 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller | 6.7 | <1% | ||
| CVE-2024-22267 | VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device | 8.2 | <1% | ||
CVE-2024-22268+2 related CVEs | VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality | 6.5 group max | <1% |
From the original article
2 min read at thehackernews.com
Multiple security flaws have been disclosed in VMware Workstation and Fusion products that could be exploited by threat actors to access sensitive information, trigger a denial-of-service (DoS) condition, and execute code under certain circumstances. The four vulnerabilities impact Workstation versions 17. x and Fusion versions 13.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.