CVE-2024-38811

Description

VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment variable.A malicious actor with standard user privileges may exploit this vulnerability to execute code in the context of the Fusion application.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.128

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2024-38811 are affected in VMware Fusion for MAC 13.5	Mac

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234