CVE-2024-10228: The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing…

PriorityP411low3.3CVSS 3.1

AVLACLPRLUINSUCNILAN

EPSS

0.14%

3.8th percentile

The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system writes. This vulnerability, CVE-2024-10228, was fixed in Vagrant VMWare Utility 1.0.23

Affected

2 ranges

Vendor	Product	Version range	Fixed in
hashicorp	vagrant	< 1.0.23	1.0.23
hashicorp	vagrant_vmware_utility	< 1.0.23	1.0.23

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.