VMware security advisory (AV24-287)

Serial number: AV24-287
Date: May 22, 2024

On May 21, 2024, VMware released a security advisory to address vulnerabilities in the following products:

• VMware Cloud Foundation (ESXi) – multiple versions
• VMware Cloud Foundation (vCenter Server) – multiple versions
• VMware ESXi – versions 8.0 prior to ESXi80U2sb-23305545 and versions 7.0 prior to ESXi70U3sq-23794019
• VMware Fusion – versions prior to 13.5.1
• VMware vCenter Server – versions 8.0 prior to 8.0 U2b and versions 7.0 prior to 7.0 U3q
• VMware Workstation – versions prior to 17.5.1

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• VMSA-2024-0011:VMware ESXi, Workstation, Fusion and vCenter Server updates address multiple security vulnerabilities (CVE-2024-22273, CVE-2024-22274, CVE-2024-22275)
• Security Advisories - VMware Cloud Foundation