CVE-2023-34057
published 2023-10-27CVE-2023-34057: VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.19%
8.8th percentile
VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual machine.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | tools | >= 10.3.0 < 12.1.1 | 12.1.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p7vx-hprg-6v5v: VMware Tools contains a local privilege escalation vulnerability
ghsa_unreviewed·2023-10-27
CVE-2023-34057 [HIGH] CWE-269 GHSA-p7vx-hprg-6v5v: VMware Tools contains a local privilege escalation vulnerability
VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual machine.
VMware
VMware Tools updates address Local Privilege Escalation and SAML Token Signature Bypass vulnerabilities (CVE-2023-34057, CVE-2023-34058)
vendor_vmware·2023-10-26·CVSS 7.1
CVE-2023-20900 [HIGH] VMware Tools updates address Local Privilege Escalation and SAML Token Signature Bypass vulnerabilities (CVE-2023-34057, CVE-2023-34058)
VMSA-2023-0024: VMware Tools updates address Local Privilege Escalation and SAML Token Signature Bypass vulnerabilities (CVE-2023-34057, CVE-2023-34058)
VMware Tools contains a local privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.8.
CVEs: CVE-2023-20900, CVE-2023-34057, CVE-2023-34058
Affected products: VMware Tools
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-10-27
Published