CVE-2024-22255
HIGHDescription
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Is your site exposed to CVE-2024-22255?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| vmware | cloud_foundation |
| vmware | workstation |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | esxi |
| vmware | fusion |
| apple | macos |
References
Frequently Asked Questions
What is CVE-2024-22255? +
How severe is CVE-2024-22255? +
What products are affected by CVE-2024-22255? +
How do I check if I'm vulnerable to CVE-2024-22255? +
Related Vulnerabilities
mcp-framework is a framework for building Model Context Protocol (MCP) servers. In versions 0.2.21 and below, the readRequestBody() function in …
spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser …
Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion. …
Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion …
Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table …
A denial-of-service security issue exists in 1734 POINT I/O™ module. The security issue stems from improper handling of crafted CIP …