
software-security-vulnerability1.42 min read
"Urgent Fix Released for Critical Rust Vulnerability Exposing Windows Systems to Command Injection Attacks"
1 year ago•Source: The Hacker News
The latest software security vulnerability stories, summarized by AI


VMware has issued security patches to fix four flaws affecting ESXi, Workstation, and Fusion, including two critical vulnerabilities that could result in code execution. The flaws, tracked as CVE-2024-22252 and CVE-2024-22253, are use-after-free bugs in the XHCI USB controller. Two other vulnerabilities, CVE-2024-22254 and CVE-2024-22255, have also been patched. VMware has provided versions addressing these issues and recommended a temporary workaround until the patches can be deployed.