Local Privilege Escalation in VMware vmwgfx Driver

CVE-2022-22942

Summary

The vmwgfx driver for VMware systems features a vulnerability that allows unprivileged users to exploit a dangling file pointer. This security flaw can enable unauthorized access to files that are currently open by other processes, presenting significant risks to sensitive data integrity and system security. Users are advised to update to the latest software versions to mitigate this issue.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2022-22942
Created by Rapid7

References