Description
VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware Workstation | 17.x – < 17.5.2 | 17.5.2 |
| — | VMware Fusion | 13.x – < 13.5.2 | 13.5.2 |
Advisories 1
- WID-SEC-2024-1141 VMware Workstation und VMware Fusion: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 14, 2024