CVE-2024-22269

2024-05-1416:16:10

CWE-200

[email protected]

web.nvd.nist.gov

vmware

workstation

fusion

information disclosure

vbluetooth device

privileged information

hypervisor memory

virtual machine

cve-2024-22269

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

28.8%

JSON

VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.