VMware Product Security Update Advisory (CVE-2024-38811)

Overview

An update has been released to address vulnerabilities in VMware Product. Users of the affected versions are advised to update to the latest version.
 

Affected Products

CVE-2024-38811
 

  • VMware Fusion versions: 13.x ~13.6 (excluded)

 

Resolved Vulnerabilities

Code execution vulnerability due to insecure environment variable usage in VMware Fusion (CVE-2024-38811)

Vulnerability Patches

 

The following product-specific Vulnerability Patches have been made available with the latest update. if you are using an affected version, please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

CVE-2024-38811

  • VMware Fusion version: 13.6

     

Referenced Sites

[1] CVE-2024-38811 Detail

https://nvd.nist.gov/vuln/detail/CVE-2024-38811

[2] VMSA-2024-0018:VMware Fusion update addresses a code execution vulnerability (CVE-2024-38811)

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24939