ZDI-CAN-27175: ZDI-26-190: (Pwn2Own) VMware Workstation PVSCSI Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2025-41238.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-27175?
The severity of ZDI-CAN-27175 is considered high due to its potential for local privilege escalation.
How do I fix ZDI-CAN-27175?
To fix ZDI-CAN-27175, you should apply the latest security patches provided by VMware for Workstation.
What systems are affected by ZDI-CAN-27175?
ZDI-CAN-27175 affects installations of VMware Workstation that are not updated to the latest security standards.
Can ZDI-CAN-27175 be exploited remotely?
No, ZDI-CAN-27175 requires local access to the affected system to be exploited.
What kind of vulnerability is ZDI-CAN-27175 classified as?
ZDI-CAN-27175 is classified as a heap-based buffer overflow vulnerability.