CVE-2024-38811

published 2024-09-03

CVE-2024-38811: VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment variable. A malicious actor with standard…

Priority P3 43 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment variable. A malicious actor with standard user privileges may exploit this vulnerability to execute code in the context of the Fusion application.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
vmware	fusion	>= 13.0.0 < 13.6	13.6
vmware	fusion	>= 13.x < 13.6	13.6

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20