VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 04/03/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| fusion | ≥ 13.0.0, < 13.6.3 | 13.6.3 |
| telco cloud infrastructure | = 2.2= 2.5= 2.7= 3.0 | |
| telco cloud platform | = 2.0= 2.5= 2.7= 3.0= 4.0= 4.0.1= 5.0 | |
| workstation | ≥ 17.0, < 17.6.3 | 17.6.3 |
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free