CVE-2024-22268

CVE-2024-22268 affects VMware Workstation and Fusion. A heap buffer-overflow in the Shader functionality can be exploited by a non-administrative attacker with access to a VM that has 3D graphics enabled to cause a denial of service. Public details from connected sources confirm affected products...

CVE-2024-22268

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition...

CVE-2024-22268

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition...

CVE-2024-22267

VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host...

CVE-2024-22267

CVE-2024-22267 affects VMware Workstation and Fusion. A use-after-free in the vbluetooth device can allow a malicious actor with local privileges inside a VM to execute code in the host VMX process. The issue is documented with high/severe impact (confidentiality/integrity/availability at risk). ...

CVE-2024-22267

VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host...

PT-2024-3566

Name of the Vulnerable Software and Affected Versions VMware Workstation and Fusion affected versions not specified Description The issue is related to a use-after-free vulnerability in the vbluetooth device of VMware Workstation and Fusion. A malicious actor with local administrative privileges ...

VMware Workstation 资源管理错误漏洞

VMware Workstation is a suite of virtual machine software from VMware. The software provides virtual machine functionality that can run multiple different operating systems at the same time. A security vulnerability exists in VMware Workstation that originates from memory reuse after release...

PT-2024-3771 · Vmware · Vmware Workstation +1

Name of the Vulnerable Software and Affected Versions: VMware Workstation and Fusion affected versions not specified Description: The issue is related to an information disclosure vulnerability in the vbluetooth device of VMware Workstation and Fusion. A malicious actor with local administrative...

CVE-2024-22268: Out-of-bounds Write

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition...

CVE-2024-22269: Exposure of Sensitive Information to an Unauthorized Actor

VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine...

VMware Workstation 缓冲区错误漏洞

VMware Workstation is a suite of virtual machine software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. A security vulnerability exists in VMware Workstation. An attacker could exploit this vulnerability to cause...

VMware Workstation 安全漏洞

VMware Workstation is a suite of virtual machine software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. A security vulnerability exists in VMware Workstation. An attacker could exploit this vulnerability to obtai...

CVE-2024-22267: Use After Free

VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host...

PT-2024-3756 · Vmware · Vmware Workstation +1

Name of the Vulnerable Software and Affected Versions: VMware Workstation and Fusion affected versions not specified Description: The issue is related to a heap buffer-overflow vulnerability in the Shader functionality of VMware Workstation and Fusion. A malicious actor with non-administrative...

CVE-2024-22270: Exposure of Sensitive Information to an Unauthorized Actor

VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing HGFS functionality. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual...

PT-2024-3757 · Vmware · Vmware Workstation +1

Name of the Vulnerable Software and Affected Versions: VMware Workstation and Fusion affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Host Guest File Sharing HGFS functionality. A malicious actor with local administrative privileg...

VMware Workstation 安全漏洞

VMware Workstation is a suite of virtual machine software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. A security vulnerability exists in VMware Workstation. An attacker could exploit this vulnerability to obtai...

VMSA-2024-0010: VMware Workstation and Fusion updates address multiple security vulnerabilities (CVE-2024-22267, CVE-2024-22268, CVE-2024-22269, CVE-2024-22270)

Advisory ID: | VMSA-2024-0010 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 7.1-9.3 Synopsis: | VMware Workstation and Fusion updates address multiple security vulnerabilities CVE-2024-22267, CVE-2024-22268, CVE-2024-22269, CVE-2024-22270 Issue date: | 2024-05-14 Updated on: | 2024-05-14...

Security Bulletin: IBM Sterling Connect:Direct Web Service is vulnerable to multiple vulnerabilities due to IBM Java

Summary IBM Sterling Connect:Direct Web Service uses IBM Java SE. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-40167 DESCRIPTION: Jetty is vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP/1 request...