CVE-2024-22267 | THREATINT

Description

VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

Reserved 2024-01-08 | Published 2024-05-14 | Updated 2025-03-14 | Assigner vmware

CRITICAL: 9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Problem types

Use-after-free vulnerability

Product status

Default status

unaffected

17.x before 17.5.2

affected

Default status

unaffected

13.x before 13.5.2

affected

References

support.broadcom.com/...l/content/SecurityAdvisories/0/24280

cve.org (CVE-2024-22267)

nvd.nist.gov (CVE-2024-22267)

Download JSON