ZDI-CAN-20719: ZDI-23-521: (Pwn2Own) VMware Workstation UHCI Component Uninitialized Variable Information Disclosure Vulnerability

Published May 1, 2023

Updated

This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability.

Affected Software

1 affected component

VMware Workstation

Event History

May 1, 2023

Advisory Published

05:00 AM

Data Sourced

05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-20719?

The severity of ZDI-CAN-20719 is considered high due to its potential to allow local attackers to disclose sensitive information.

How do I fix ZDI-CAN-20719?

To fix ZDI-CAN-20719, ensure that you apply the latest security updates from VMware Workstation.

Who is affected by ZDI-CAN-20719?

ZDI-CAN-20719 affects installations of VMware Workstation where high-privileged code execution is possible.

What type of vulnerability is ZDI-CAN-20719?

ZDI-CAN-20719 is a local information disclosure vulnerability.

What must an attacker do to exploit ZDI-CAN-20719?

An attacker must first obtain the ability to execute high-privileged code on the target guest system to exploit ZDI-CAN-20719.