PT-2023-6348 · Vmware · Vmware Workstation+1

Gwangun Jung + 1 · CVE-2023-34044 · Published 2023-10-20 · Updated 2026-06-09

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware Workstation versions prior to 17.5 VMware Fusion versions prior to 13.5

Description An out-of-bounds read issue exists in the functionality used to share host Bluetooth devices with a virtual machine. A malicious actor with local administrative privileges on a virtual machine can exploit this to read privileged information stored in the hypervisor memory.

Recommendations Update VMware Workstation to version 17.5 or later. Update VMware Fusion to version 13.5 or later.

Fix

RCE

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2023-07060

CVE-2023-34044

ZDI-23-1589

Affected Products

Vmware Fusion

Vmware Workstation

References · 37

• https://nvd.nist.gov/vuln/detail/CVE-2023-34044 · Security Note
• https://vmware.com/security/advisories/VMSA-2023-0022.html · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-1589 · Security Note
• https://bdu.fstec.ru/vul/2023-07060 · Security Note
• https://osv.dev/vulnerability/CVE-2023-34044 · Vendor Advisory
• https://twitter.com/0xor0ne/status/2041169672830079345 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rea8zx/top_10_trending_cves_25022026 · Reddit Post
• https://twitter.com/nish/status/1715282904765321255 · Twitter Post
• https://t.me/cvenotify/60124 · Telegram Post
• https://twitter.com/0xor0ne/status/2064369539236687889 · Twitter Post
• https://twitter.com/alexjplaskett/status/1973691599898231010 · Twitter Post
• https://kb.vmware.com/s/article/91760 · Note
• https://reddit.com/r/CVEWatch/comments/1p7zj5y/top_10_trending_cves_27112025 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1rf78b8/top_10_trending_cves_26022026 · Reddit Post
• https://twitter.com/0xor0ne/status/1993711910190031157 · Twitter Post