Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-22251

VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administrative privileges on a virtual machine may trigger an out-of-bounds read leading to information disclosure.

Published

2024-02-29T01:44:05.870

Last Modified

2025-06-10T19:33:10.877

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application vmware workstation < 17.5.1 Yes
Application vmware fusion < 13.5.1 Yes
Operating System apple macos - No
References