6.7
Moyenne
CVE-2023-34046 VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during…
Description
VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg' volume) or when installing an upgrade. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed or being installed for the first time.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fusion 13 | 13.x → < 13.5 | 13.5 |
Autres CVE de Fusion
Les 49 CVE de Fusion →
CVE-2026-41703
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability
7.6
Élevée
CVE-2026-41702
VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a…
7.8
Élevée
CVE-2026-22715
VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A…
5.9
Moyenne
CVE-2025-41239
VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage…
7.1
Élevée