PT-2023-7462 · Vmware · Vmware Fusion+1

Published 2023-04-25 · Updated 2026-04-08 · CVE-2023-20870

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware Workstation and Fusion (affected versions not specified)

Description The issue is related to an out-of-bounds read that exists in the functionality for sharing host Bluetooth devices with the virtual machine. This could allow an attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2023-08505

CVE-2023-20870

ZDI-23-521

Affected Products

Vmware Fusion

Vmware Workstation

References · 34

• https://zerodayinitiative.com/advisories/ZDI-23-521 · Security Note
• https://bdu.fstec.ru/vul/2023-08505 · Security Note
• https://vmware.com/security/advisories/VMSA-2023-0008.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20870 · Security Note
• https://osv.dev/vulnerability/CVE-2023-20870 · Vendor Advisory
• https://t.me/cvenotify/109952 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1rf78b8/top_10_trending_cves_26022026 · Reddit Post
• https://twitter.com/0xor0ne/status/1993711910190031157 · Twitter Post
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23670 · Note
• https://t.me/poxek/6033 · Telegram Post
• https://kb.vmware.com/s/article/91760 · Note
• https://reddit.com/r/CVEWatch/comments/1q11rdj/top_10_trending_cves_01012026 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1oggudz/top_10_trending_cves_26102025 · Reddit Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20870 · Note
• https://reddit.com/r/CVEWatch/comments/1ohaete/top_10_trending_cves_27102025 · Reddit Post