high7.1
CVE-2024-22270
VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality.
Impact
VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Workstation | from 17.0.0 before 17.5.2 |
| Vmware | Fusion | from 13.0.0 before 13.5.2 |