KLA64773 Multiple vulnerabilities in VMware Workstation

Multiple vulnerabilities were found in VMware Workstation. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in UHCI USB controller can be exploited to execute arbitrary code.
2. Information disclosure vulnerability in UHCI USB controller can be exploited to obtain sensitive information.
3. Use after free vulnerability in XHCI USB controller can be exploited to execute arbitrary code.

Original advisories

VMSA-2024-0006.1

Related products

VMware-Workstation

CVE list

CVE-2024-22253 unknown

CVE-2024-22255 unknown

CVE-2024-22252 unknown

Solution

Update to the latest version

Download VMware Workstation

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

Affected Products

• VMware Workstation 17.x earlier than 17.5.1