TI-2024-26038 Aliases CVE-2024-38811 GHSA-j6v2-m8w2-27f8

Code-execution in Fusion

MEDIUM 40CWE-20Published 2024-09-03 · Updated 2024-09-05

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment variable. A malicious actor with standard user privileges may exploit this vulnerability to execute code in the context of the Fusion application.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0028 20th percentileScored 2026-11-07

Fix Fixed Fusion: 13.6

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Fusion	13.x to before 13.6	13.6	Patch available	CNA

Fusion Vendor— Affected 13.x to before 13.6 Fixed in 13.6 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:vmware:fusion::::::::	13.0.0 to before 13.6	Vulnerable	VMware

cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* Versions 13.0.0 to before 13.6 Vulnerable ·VMware

Remediation

Fix · CNA Fusion Fixed in 13.6

Timeline

2026-10-02 Threatist record created from CVE-2024-38811
2026-10-03 Alias added: GHSA-j6v2-m8w2-27f8

References

Advisory 1

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24939

TI-2020-03448 Improper privilege management in VMware Fusion, VMware Remote Console for Mac and Horizon… KEVCVSS 3.1HIGH 7.8
TI-2025-16137 Out-of-bounds read in ESXi KEVCVSS 3.1HIGH 7.1
TI-2017-03716 Observable discrepancy in Intel Most Modern Operating Systems CVSS 3.1MEDIUM 5.6
TI-2017-03034 Memory corruption in VMware Workstation Pro/Player CVSS 3.0CRITICAL 9.9
TI-2016-04622 Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware… CVSS 3.1HIGH 7.8
TI-2011-03420 Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5… CVSS 2.0HIGH 9.3

See all 130 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences