CVE-2023-34044

Information disclosure vulnerability in bluetooth device-sharing functionality

High · published October 20, 2023

CVSS v3.1
7.1
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds

read vulnerability that exists in the functionality for sharing host

Bluetooth devices with the virtual machine. A malicious actor with local administrative privileges on a virtual

machine may be able to read privileged information contained in

hypervisor memory from a virtual machine.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00197 · 9.0th percentile
Published
2023-10-20T08:56Z
EPSS history
Timeline
  • 20 OCT 08:56Z
    Information disclosure vulnerability in bluetooth device-sharing functionality
    cvelistv5