← Back

CVE-2023-20854

nvd nist
Published: Feb 3, 2023Modified: Jun 17, 2026

JSON object

Loading...
8.4
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
Exploitability: 2.0 / Impact: 5.8
Source: NVD

Description

VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed.

Affected (1)

Products: Vmware: Workstation
Vmware
1 product
Workstation
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Workstation
Version 17.0
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

Source: security@vmware.com
PatchRelease NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchRelease NotesVendor Advisory

Timeline

No history available yet.