Exploit / PoCcritical

VMware fixed 2 zero

Security Affairsby @securityaffairsApr 25, 2023 · 19:49 UTC (Apr 25, 2023)1 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2023-20869 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-20869 CVE-2023-20870

Tags: cve-2023-20869 cve-2023-20870 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-20869 +1 related CVE CVE-2023-20870	VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host…	8.2 group max	2%		Apr 25, 2023

From the original article

1 min read at securityaffairs.com

VMware addressed zero-day flaws that can be chained to achieve arbitrary code execution on Workstation and Fusion software hypervisors. VMware released security updates to address two zero-day vulnerabilities ( CVE-2023-20869, CVE-2023-20870 ) that were chained by the STAR Labs team during the Pwn2Own Vancouver 2023 hacking contest against Workstation and Fusion software hypervisors.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.