Description
VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware Workstation | 17.x – < 17.5.2 | 17.5.2 |
| — | VMware Fusion | 13.x – < 13.5.2 | 13.5.2 |
Advisories 1
- WID-SEC-2024-1141 VMware Workstation und VMware Fusion: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 14, 2024