VMware Fusion installer local privilege escalation

CVE-2023-34045

Summary

VMware Fusion versions 13.x prior to 13.5 exhibit a local privilege escalation vulnerability that can be exploited during the initial installation or during application upgrades. This flaw arises when a non-administrative user is able to drag or copy the application from the '.dmg' volume, potentially allowing malicious actors to elevate privileges to root, compromising the security of the system on which Fusion is installed.

References