ZDI-24-526: (Pwn2Own) VMware Workstation VBluetoothHCI_PacketOut Use-After-Free Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2024-22267.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-526?
ZDI-24-526 has a high severity level due to its potential for privilege escalation.
How do I fix ZDI-24-526?
To fix ZDI-24-526, you should apply the latest security updates provided by VMware for Workstation.
What systems are affected by ZDI-24-526?
ZDI-24-526 affects installations of VMware Workstation on guest systems where high-privileged code execution is possible.
Can ZDI-24-526 be exploited remotely?
No, ZDI-24-526 requires local access to exploit, making remote exploitation not feasible.
What impact does ZDI-24-526 have on a system?
Exploiting ZDI-24-526 allows local attackers to escalate their privileges, potentially compromising system security.