Broadcom has released security updates to address three actively exploited security flaws in VMware ESXi, Workstation, and Fusion products that could lead to code execution and information disclosure.
The list of vulnerabilities is as follows –
The shortcomings impact the below versions –
In a separate FAQ, Broadcom acknowledged that it has “information to suggest that exploitation of these issues has occurred ‘in the wild,’ but it did not elaborate on the nature of the attacks or the identity of the threat actors that have weaponized them.
The virtualization services provider credited the Microsoft Threat Intelligence Center for discovering and reporting the bugs. In light of active exploitation, it’s essential that users apply the latest patches for optimal protection.