Description
VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment variable. A malicious actor with standard user privileges may exploit this vulnerability to execute code in the context of the Fusion application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Fusion | 13.x – < 13.6 | 13.6 |
Advisories 1
- WID-SEC-2024-2034 VMware Fusion: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Sep 2, 2024