VULNERABILITY INTELLIGENCE

CVE-2023-20854

CVSS score8.4 HIGH

EPSS probability0.29%

CISA KEVNot currently listed

Published2023-02-03

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Description

VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed.

Weakness classification

nvd@nist.gov: CWE-269
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-269

Primary references

security@vmware.com — Patch, Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Release Notes, Vendor Advisory