medium6.8
CVE-2024-37086
VMware ESXi contains an out-of-bounds read vulnerability.
Impact
VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapshot may trigger an out-of-bounds read leading to a denial-of-service condition of the host.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Cloud Foundation | from 4.0 before 5.2 |
| Vmware | Esxi | Versions 7.0, 8.0 |