PoC exploit Released for VMware Workstation guest-to-host escape Vulnerability

⁨16⁩ ⁨likes⁩

Submitted ⁨⁨5⁩ ⁨days⁩ ago⁩ by ⁨cm0002@piefed.social⁩ to ⁨cybersecurity@infosec.pub⁩

https://cybersecuritynews.com/vmware-workstation-vulnerability/

Comments

Sort:hotnew top

cron@feddit.org ⁨5⁩ ⁨days⁩ ago

For users who cannot immediately update, a potential workaround is to disable the virtual Bluetooth device. This can be done by unchecking the “Share Bluetooth devices with the virtual machine” option in the virtual machine’s USB Controller settings.

As far as I know, it’s a best practice to enable as few virtual hardware devices as possible. For example, most VMWare guests will not need USB or bluetooth or camera support.

source