CVE-2024-22267: Use After Free
VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22267?
CVE-2024-22267 is considered a critical vulnerability due to its potential for local administrative exploitation on VMware Workstation and Fusion.
How do I fix CVE-2024-22267?
To fix CVE-2024-22267, ensure that you update your VMware Workstation or Fusion to the latest patched version provided by VMware.
What type of vulnerability is CVE-2024-22267?
CVE-2024-22267 is a use-after-free vulnerability specifically affecting the vbluetooth device in VMware products.
Who can exploit CVE-2024-22267?
Only a malicious actor with local administrative privileges on the virtual machine can exploit CVE-2024-22267.
What could happen if CVE-2024-22267 is exploited?
If exploited, CVE-2024-22267 could allow an attacker to execute arbitrary code within the VMX process on the host system.