Description
VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed.
Published: 2023-02-03
Score: 8.4 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-25033 VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed.
History

Wed, 26 Mar 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Microsoft Windows
Vmware Workstation
cve-icon MITRE

Status: PUBLISHED

Assigner: vmware

Published:

Updated: 2025-03-26T14:05:19.424Z

Reserved: 2022-11-01T00:00:00.000Z

Link: CVE-2023-20854

cve-icon Vulnrichment

Updated: 2024-08-02T09:14:41.251Z

cve-icon NVD

Status : Modified

Published: 2023-02-03T19:15:13.733

Modified: 2025-03-26T14:15:28.260

Link: CVE-2023-20854

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses