"Urgent VMware Security Patches Fix Critical Flaws Across ESXi, Workstation, and Fusion"
TL;DR
VMware has issued security patches to fix four flaws affecting ESXi, Workstation, and Fusion, including two critical vulnerabilities that could result in code execution. The flaws, tracked as CVE-2024-22252 and CVE-2024-22253, are use-after-free bugs in the XHCI USB controller. Two other vulnerabilities, CVE-2024-22254 and CVE-2024-22255, have also been patched. VMware has provided versions addressing these issues and recommended a temporary workaround until the patches can be deployed.
Topics:technologysoftware-security-vulnerability#esxi#fusion#security-patches#software-security-vulnerability#vmware#vulnerabilities#workstation
- VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws The Hacker News
- VMware Patches Critical ESXi Sandbox Escape Flaws SecurityWeek
- VMware fixes critical sandbox escape flaws in ESXi, Workstation, and Fusion BleepingComputer
- VMware urgent updates addressed Critical ESXi Sandbox Escape bugs Security Affairs
- Critical VMware vulnerabilities addressed | SC Media SC Media
Want the full story? Read the original reporting
Read on The Hacker News