CVE-2024-22255

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.  

Score

CVSS 3.1 7.1 High

Status

Analyzed - security@vmware.com

Published

2024-03-05

Last modified

2025-08-26

Weaknesses

CWE-770

Affected products

• Cloud Foundation (Vmware)
• Esxi (Vmware)
• Fusion (Vmware)
• Workstation (Vmware)

References

• https://www.vmware.com/security/advisories/VMSA-2024-0006.html