UpHeron
All vulnerabilities

Servers and applications

CVE-2024-22253

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code…

Severity
Medium 6.7
Published
5 Mar 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
VMware ESXiServers and applications · cpe:o:vmware:esxi
  • Version 8.0-update_2
  • Version 8.0-update_1
  • Version 8.0
  • Version 8.0-update_1c
All 34 release lines
  • Version 7.0.0-b
  • Version 7.0-update_1a
  • Version 7.0-update_1b
  • Version 7.0-update_1c
  • Version 7.0-update_2a
  • Version 7.0-update_2c
  • Version 7.0-update_3c
  • Version 7.0
  • Version 7.0-update_1
  • Version 7.0-update_1d
  • Version 7.0-update_1e
  • Version 7.0-update_2
  • Version 7.0-update_2d
  • Version 7.0-update_2e
  • Version 7.0-update_3
  • Version 7.0-update_3d
  • Version 7.0-update_3e
  • Version 7.0-update_3f
  • Version 7.0-update_3g
  • Version 7.0-update_3i
  • Version 7.0-update_3j
  • Version 7.0-update_3k
  • Version 7.0-update_3l
  • Version 7.0-update_3m
  • Version 7.0-update_3n
  • Version 7.0-update_3o
  • Version 8.0-a
  • Version 8.0-b
  • Version 8.0-c
  • Version 8.0-update_1a
  • Version 8.0-update_1c
  • Version 8.0
  • Version 8.0-update_1
  • Version 8.0-update_2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-22253
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-22253