4
VMWare releases Fusion vulnerability with 8.8 rating (cyberscoop.com)
submitted 2 months ago by IllNess@infosec.pub to c/securitynews@infosec.pub
1 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[-] IllNess@infosec.pub 2 points 2 months ago

The security advisory is for version 13.x until 13.6 on the popular virtualization software for macOS. The bug — CVE-2024-38811 — has a CVSSv3 base score of 8.8 and is caused by an insecure environment variable. Mykola Grymalyuk of RIPEDA Consulting reported the vulnerability and VMWare has issued a patched version of the software.

The vulnerability allows a user with standard privileges to execute code within the Fusion application.

this post was submitted on 04 Sep 2024
4 points (83.3% liked)

Security News

2279 readers
1 users here now

founded 2 years ago
MODERATORS
jerry@infosec.pub