CVE-2024-22255
7.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Summary
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | VMware ESXi | 8.0 < ESXi80U2sb-23305545 | affected |
| n/a | VMware ESXi | 8.0 < ESXi80U1d-23299997 | affected |
| n/a | VMware ESXi | 7.0 < ESXi70U3p-23307199 | affected |
| n/a | VMware Workstation | 17.x < 17.5.1 | affected |
| n/a | VMware Fusion | 13.x < 13.5.1 | affected |
| n/a | VMware Cloud Foundation | 5.x | affected |
| n/a | VMware Cloud Foundation | 4.x | affected |
Weaknesses
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.