vulnerability

VMware Fusion: Vulnerability (VMSA-2024-0010) (CVE-2024-22268)

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:C)
Published
Jun 14, 2024
Added
Jun 14, 2024
Modified
Mar 27, 2026

Description

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition.

Solution

vmware-fusion-upgrade-13_5_2
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.