Secuno
ENNL
Book demo

CVE-2024-22253

VMware Fusion vulnerability

9.3 CRITICALEPSS 0.65%
  1. Published5 Mar 2024

Description

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.

CVSS 3.1 breakdown

Attack vectorLocal
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

VMware Cloud Foundation≥ 4.0 ≤ 5.0
VMware Fusion≥ 13.0.0 < 13.5.1
VMware Workstation≥ 17.0.0 < 17.5.1
VMware Esxi7.0 · 7.0.0 · 8.0

Remediation

Fixed in
VMware Fusion≥ 13.5.1
VMware Workstation≥ 17.5.1

Frequently asked

Is CVE-2024-22253 being actively exploited?

CVE-2024-22253 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.65%.

How severe is CVE-2024-22253?

CVE-2024-22253 has a CVSS 3.1 base score of 9.3, rated critical. EPSS estimates a 0.65% probability of exploitation.

Which products are affected by CVE-2024-22253?

Affected products include VMware Cloud Foundation, VMware Fusion, VMware Workstation, VMware Esxi.

How do I fix CVE-2024-22253?

Upgrade affected software to a fixed version, for example VMware Fusion 13.5.1, VMware Workstation 17.5.1 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2024-22253 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.