CVE-2024-38811 Code-execution vulnerability
A malicious actor with standard user privileges can execute arbitrary code in the context of the VMware Fusion application via an insecure environment variable.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-38811?
CVE-2024-38811 is a high-severity code injection vulnerability in Vmware Fusion, published on 3 Sep 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment variable. A malicious actor with standard user privileges may exploit this vulnerability to execute code in the context of the Fusion application.
Weakness: CWE-20
Which versions are affected by CVE-2024-38811?
It affects 1 product.
Products include Vmware Fusion.
How do I fix CVE-2024-38811?
No fix has been published for CVE-2024-38811 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2024-38811 being exploited?
There is no known exploitation of CVE-2024-38811 in the wild and no public exploit code.
Other vulnerabilities in Vmware Fusion
- CVE-2020-3950 VMware Multiple Products Privilege Escalation
- CVE-2017-4901 Memory corruption in Fusion Pro / Fusion
- CVE-2024-22267 Use after free in VMware Fusion
- CVE-2019-5541 Memory corruption in Workstation and Fusion
- CVE-2023-20872 Memory corruption in VMware Workstation Pro / Player (Workstation) and VMware Fusion
Sources
Also known as GHSA-j6v2-m8w2-27f8.