CVE-2024-22251: VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local…

PriorityP417medium4.4CVSS 3.1

AVLACLPRHUINSUCHINAN

EPSS

0.23%

13.4th percentile

VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administrative privileges on a virtual machine may trigger an out-of-bounds read leading to information disclosure.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
vmware	fusion	>= 13.0.0 < 13.5.1	13.5.1
vmware	workstation	>= 17.0 < 17.5.1	17.5.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.