Vulnerabilitycritical

VMware Releases Critical Patches for Workstation and Fusion Software

The Hacker Newsby @TheHackersNewsApr 26, 2023 · 13:10 UTC (Apr 26, 2023)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-20869 CVE-2023-20870 CVE-2023-20871 CVE-2023-20872 CVE-2023-20864

Tags: cve-2023-20869 cve-2023-20870 cve-2023-20871 cve-2023-20872 cve-2023-20864 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-20864	VMware Aria Operations for Logs contains a deserialization vulnerability	9.8	70%		Apr 20, 2023
CVE-2023-20872 +3 related CVEs CVE-2023-20869 CVE-2023-20871 CVE-2023-20870	VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation	8.8 group max	<1%		Apr 25, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Apr 26, 2023 Virtual Machine / Cybersecurity VMware has released updates to resolve multiple security flaws impacting its Workstation and Fusion software, the most critical of which could allow a local attacker to achieve code execution. The vulnerability, tracked as CVE-2023-20869 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.