VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Oct 20, 2023· Updated Jun 17, 2026

CVE-2023-34046

CVE-2023-34046

Description

VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg' volume) or when installing an upgrade. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed or being installed for the first time.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • VMware/Fusion3 versions
    cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: >=13.0.0,<13.5
    • (no CPE)range: <13.5
    • (no CPE)range: 13.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.