CVE-2023-20854

CVSS 3.1: 8.4 high
EPSS: <1%p22
Published: Feb 3, 2023 · Feb 3, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-20854 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed.

Vendors: vmware

Products: workstation

Weakness: CWE-269

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

1 story

VMware Workstation update fixes an arbitrary file deletion bug

Security AffairsFeb 3, 14:07 UTC · Feb 3, 2023Exploit / PoCCVE-2023-20854 CVE-2022-317064 · 1 read