CVE-2024-22268: VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a…

PriorityP426medium6.5CVSS 3.1

AVLACLPRLUINSCCNINAH

EPSS

0.50%

39.8th percentile

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
vmware	fusion	>= 13.0.0 < 13.5.2	13.5.2
vmware	workstation	>= 17.0.0 < 17.5.2	17.5.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.