VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2024 0006 | — | Upgrade VMware ESXi 8.0.1 to build number 23299997Upgrade VMware ESXi 7.0.1 to build number 23307199Upgrade VMware ESXi 7.0.2 to build number 23307199Upgrade VMware ESXi 8.0.2 to build number 23305545Upgrade VMware ESXi 7.0.0 to build number 23307199Upgrade VMware ESXi 7.0.3 to build number 23307199Upgrade VMware ESXi 8.0.0 to build number 23299997 | Mar 7, 2024 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
