CVE-2024-22251

Summary

CVE-2024-22251 is a newly disclosed vulnerability affecting VMware Workstation and Fusion. This issue involves an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A local administrative user on a virtual machine can exploit this flaw, causing an out-of-bounds read incident, resulting in information disclosure. Although the details of the exposed information are not yet clear, this vulnerability poses a significant risk, and VMware urges users to apply the available patches as soon as possible to mitigate it.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.