ZDI-CAN-23844: ZDI-24-526: (Pwn2Own) VMware Workstation VBluetoothHCI_PacketOut Use-After-Free Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2024-22267.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-23844?
The CVSS score for ZDI-CAN-23844 indicates a high severity due to the potential for local privilege escalation.
How do I fix ZDI-CAN-23844?
To fix ZDI-CAN-23844, ensure that you apply the latest patches provided by VMware for Workstation.
Who is affected by ZDI-CAN-23844?
ZDI-CAN-23844 affects users of VMware Workstation who have not applied the necessary security updates.
Can ZDI-CAN-23844 be exploited remotely?
No, ZDI-CAN-23844 requires local access to the target system for exploitation.
What are the potential impacts of ZDI-CAN-23844?
The potential impacts of ZDI-CAN-23844 include unauthorized privilege escalation by local attackers on the affected system.