← CVE Intelligence

CVE-2024-22255

Information disclosure vulnerability PUBLISHED

Description (CNA)

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.  

Affected (CNA)

Vendor / productVersions
n/a / VMware ESXiaffected 8.0 before ESXi80U2sb-23305545; affected 8.0 before ESXi80U1d-23299997; affected 7.0 before ESXi70U3p-23307199
n/a / VMware Workstationaffected 17.x before 17.5.1
n/a / VMware Fusionaffected 13.x before 13.5.1
n/a / VMware Cloud Foundationaffected 5.x; affected 4.x

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.