CVE-2024-22269

HIGH

VMware Workstation/Fusion - Info Disclosure

Title source: llm

Description

VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.

References (1)

[Vendor Advisory] https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280

Scores

CVSS v3 7.1

EPSS 0.0008

EPSS Percentile 22.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Classification

CWE

CWE-200

Status published

Affected Products (2)

vmware/workstation < 17.5.2

vmware/fusion < 13.5.2

Timeline

Published May 14, 2024

Tracked Since Feb 18, 2026