Local Privilege Escalation in VMware vmwgfx Driver
CVE-2022-22942
7.8HIGH
Summary
The vmwgfx driver for VMware systems features a vulnerability that allows unprivileged users to exploit a dangling file pointer. This security flaw can enable unauthorized access to files that are currently open by other processes, presenting significant risks to sensitive data integrity and system security. Users are advised to update to the latest software versions to mitigate this issue.
Affected Version(s)
Photon OS 3.0, 4.0
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved