Severity
High
Analysis Summary
CVE-2024-38811
VMware Fusion could allow a local authenticated attacker to execute arbitrary code on the system, caused by the usage of an insecure environment variable. An attacker could exploit this vulnerability to execute code in the context of the Fusion application.
Impact
- Code Execution
Indicators of Compromise
CVE
- CVE-2024-38811
Affected Vendors
VMWare
Affected Products
- VMware Fusion - 13.0
Remediation
Refer to VMware Security Advisory for patch, upgrade or suggested workaround information.