Description
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| ESXi | n/a / ESXi | >= 7.0, < ESXi70U3s-24585291 | affected |
| ESXi | n/a / ESXi | >= 8.0, < ESXi80U3d-24585383 | affected |
| ESXi | n/a / ESXi | >= 8.0, < ESXi80U2d-24585300 | affected |
| VMware Cloud Foundation | n/a / VMware Cloud Foundation | 5.x, 4.5.x | affected |
| VMware Fusion | n/a / VMware Fusion | >= 13.x, < 13.6.3 | affected |
| VMware Telco Cloud Infrastructure | n/a / VMware Telco Cloud Infrastructure | 3.x, 2.x | affected |
| VMware Telco Cloud Platform | n/a / VMware Telco Cloud Platform | 5.x, 4.x, 3.x, 2.x | affected |
| VMware Workstation | n/a / VMware Workstation | >= 17.x, < 17.6.3 | affected |