VYPR
Unrated severityNVD Advisory· Published Oct 20, 2023· Updated Mar 7, 2025

VMware Fusion installer local privilege escalation

CVE-2023-34045

Description

VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg' volume) or when installing an upgrade. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed or being installed for the first time.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • VMware/Fusionllm-fuzzy2 versions
    <13.5+ 1 more
    • (no CPE)range: <13.5
    • (no CPE)range: 13.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.