ZDI-23-521: (Pwn2Own) VMware Workstation UHCI Component Uninitialized Variable Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-521?
The severity of ZDI-23-521 is significant as it allows local attackers to disclose sensitive information on affected installations.
How do I fix ZDI-23-521?
To fix ZDI-23-521, it is recommended to update VMware Workstation to the latest version that addresses this vulnerability.
Who is affected by ZDI-23-521?
ZDI-23-521 affects installations of VMware Workstation where local attackers have the ability to execute high-privileged code.
What kind of information can be disclosed through ZDI-23-521?
ZDI-23-521 allows attackers to disclose sensitive information, though specific details about the type of information have not been publicly shared.
What steps should I take if I suspect exploitation of ZDI-23-521?
If you suspect exploitation of ZDI-23-521, you should immediately apply the relevant security updates and conduct a security assessment of your systems.