6.6
Medium
CVE-2023-34045 VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation…
Description
VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg' volume) or when installing an upgrade. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed or being installed for the first time.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fusion 13 | 13.x → < 13.5 | 13.5 |
Other CVEs of Fusion
The 49 CVEs of Fusion →
CVE-2026-41703
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability
7.6
High
CVE-2026-41702
VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a…
7.8
High
CVE-2026-22715
VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A…
5.9
Medium
CVE-2025-41239
VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage…
7.1
High