Skip to main navigation Skip to main content Skip to page footer

Security Alert: Critical Remote Code Execution Vulnerabilities in PHP

Data Protection Office
Contact us Report an incident
Data Protection Office
Contact us Report an incident

Alert: VMware Security Updates – May, 2024

VMware has released a security update to address a vulnerability found in VMware Workstation and Fusion products. The security update addresses four security vulnerabilities identified as (CVE-2024-22267, CVE-2024-22268, CVE-2024-22269, and CVE-2024-22270).

 

Affected Systems

 

  • VMware Workstation Pro & Player
  • VMware Fusion & Fusion Pro

 

Security Risks

 

The Successful exploitation of the vulnerability could lead to information disclosure on the affected system.

 

Recommended Actions

 

The National Cyber Security Authority (NCSA) strongly recommends that system administrators:

 

  • Follow VMware advisory to lower the risk of potential exploits, protect systems, and ensure their security.
  • Apply the required and latest security updates as soon as possible.
  • Apply the required and latest security updates as soon as possible. The released software versions to upgrade to are as follows:
  • VMware Workstation Pro / Player Version 17.5.2 : for any OS.
  • VMware Fusion Version 13.5.2 : for OS X
  • Before any update task, please ensure you have a recent backup that can easily be restored.

 

For further information and support, please contact NCSA by email at rwcsirt@ncsa.gov.rw or call us at 9009.

 

References