VMware released a security advisory for a major vulnerability in the VMware Fusion product. This vulnerability could be exploited by attackers to run malicious code. CVE-2024-38811 is a vulnerability caused by using an insecure environment variable in the application, with a CVSSv3 score of 8.8, making it important.
VMware Fusion 13.x versions on MacOS are impacted. A security flaw in VMware Fusion lets a regular user execute any code in the application.
By infosecbulletin
/ Saturday , February 15 2025
Xploit_Cr3w and Blind_Virus are the two champion teams categorically for BCS ICT Fest 2025 arranged jointly by BCS and BUET....
Read More
By infosecbulletin
/ Friday , February 14 2025
Between December 2024 and January 2025, Recorded Future's Insikt Group discovered a campaign targeting unpatched Cisco devices used by major...
Read More
By infosecbulletin
/ Friday , February 14 2025
On February 13, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) issued 20 advisories about serious vulnerabilities in Industrial Control...
Read More
By infosecbulletin
/ Friday , February 14 2025
The new Astaroth Phishing Kit can bypass two-factor authentication to steal login credentials for Gmail, Yahoo, and Microsoft. It uses...
Read More
By infosecbulletin
/ Thursday , February 13 2025
A sophisticated malware campaign is targeting military and government entities in Bangladesh. It uses social engineering to deliver malicious files...
Read More
By infosecbulletin
/ Thursday , February 13 2025
CrowdStrike has issued a security advisory for a serious TLS vulnerability, CVE-2025-1146, in its Falcon Sensor for Linux, Falcon Kubernetes...
Read More
By infosecbulletin
/ Thursday , February 13 2025
Palo Alto Networks has issued advisories for two critical vulnerabilities in its PAN-OS. The vulnerabilities, CVE-2025-0108 and CVE-2025-0110, may enable...
Read More
By infosecbulletin
/ Thursday , February 13 2025
Ivanti has released security updates for Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Secure Access Client (ISAC)...
Read More
By infosecbulletin
/ Wednesday , February 12 2025
Last year, a joint investigation revealed that a Florida-based data broker, Datastream Group, was selling highly sensitive location data that...
Read More
By infosecbulletin
/ Wednesday , February 12 2025
In 2024, Intel addressed a remarkable 374 vulnerabilities across its software, firmware, and hardware products, distributing bug bounty rewards for...
Read More
This flaw is worrying because it can be exploited without needing special access, so more attackers could use it.
Broadcom released an update to fix the vulnerability. Users should upgrade to VMware Fusion 13.6, the patched version.
There are no known workarounds for this vulnerability, making the update crucial for maintaining security. VMware has credited Mykola Grymalyuk of RIPEDA Consulting for responsibly reporting the issue, allowing the company to address the vulnerability before it could be exploited in the wild.
Users are advised to update VMware Fusion now to protect against exploitation. It’s crucial for organizations to prioritize this update to safeguard their systems from potential attacks.
As of now, there are no known specific exploits in circulation for CVE-2024-38811.