VMware Fusion TOCTOU local privilege escalation vulnerability

CVE-2023-34046

Summary

VMware Fusion prior to version 13.5 contains a TOCTOU vulnerability that can be exploited during the installation process. An attacker with local non-administrative privileges could exploit this flaw to gain elevated privileges, allowing them to execute commands with root-level access on macOS systems where VMware Fusion is installed or being installed. This vulnerability highlights the significance of secure installation practices and the importance of monitoring access levels during application deployment.

References