high7.1
CVE-2024-22255
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller.
Impact
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Cloud Foundation | from 4.0 through 5.0 |
| Vmware | Workstation | from 17.0.0 before 17.5.1 |
| Vmware | Esxi | Versions 7.0, 7.0.0, 8.0 |
| Vmware | Fusion | from 13.0.0 before 13.5.1 |