Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: VMware Fusion 13.5 Clear all filters
TI-2023-16911 CVE-2023-34045 · GHSA-gqww-mmf9-7x23

VMware Fusion installer local privilege escalation

Priority LOW 35

VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg' volume)…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2023-10-20 Fixed in 13.5 CWE-269
TI-2023-16912 CVE-2023-34046 · GHSA-vrpg-hfmh-2gwf

VMware Fusion TOCTOU local privilege escalation vulnerability

Priority LOW 32

VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg'…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0013 Published 2023-10-20 Fixed in 13.5 CWE-367
TI-2023-16910 CVE-2023-34044 · GHSA-mj48-4fj3-6fjg

Information disclosure vulnerability in bluetooth device-sharing functionality

Priority LOW 31

VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00197 Published 2023-10-20 Fixed in 17.5, 13.5 CWE-125