CVE-2024-22267 - CVE House
Back to Database
Status published Critical CVE-2024-22267

VMware Workstation and Fusion contain a use-after-free vulnerability in the...

Vulnerability Description

VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-22267

Credits & Attribution

No credits recorded in the NVD database.

References

More from NA

View All →
CVE-2022-23005
Host Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature
High 8.7

Affected Vendor

Affected Software

VMware Workstation, VMware Fusion
Vulnerable Versions:
17.x, 13.x

Timeline

Official Publish: May 14th, 2024
Last Modified: March 14th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.