VMware discloses flaws in Workstation and Fusion Pro products after making them free for personal use
Briefly

from ITPro8 months ago
The first and most serious of these was CVE-2024-22267, a critical use-after-free vulnerability... an unauthorized actor with access to a VM with 3D graphics enabled the ability to force the target system into a denial of service (DoS) condition.
ITProhttps://www.itpro.com/cloud/cloud-security/vmware-discloses-flaws-in-workstation-and-fusion-pro-products-after-making-them-free-for-personal-use
VMware disclosed another high-severity vulnerability - CVE-2024-22269 - which is an information disclosure flaw in the bluetooth device that could allow an attacker with admin privileges on a VM to read sensitive information contained in the hypervisor memory.
ITProhttps://www.itpro.com/cloud/cloud-security/vmware-discloses-flaws-in-workstation-and-fusion-pro-products-after-making-them-free-for-personal-use
Read at ITPro
#vmware #security-vulnerabilities #hypervisor-solutions #cvss-rating #patching
[
|
]