CVE-2023-34046

Summary

CVE-2023-34046 is a TOCTOU (Time-of-check Time-of-use) vulnerability affecting VMware Fusion versions prior to 13.5. This issue arises during the initial installation of an application or an upgrade, when a user drags or copies the application to a folder. A non-administrative local attacker can exploit this vulnerability to gain root privileges on the system where Fusion is being installed or already installed for the first time.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.