Code injection

A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...

CVE-2022-3700

CVE-2022-3700 describes a TOCTOU race condition in Lenovo Vantage SystemUpdate Plugin (versions

CVE-2022-3700

A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...

PT-2023-13516 · Lenovo · Lenovo Vantage Systemupdate Plugin

Name of the Vulnerable Software and Affected Versions: Lenovo Vantage SystemUpdate Plugin versions 2.0.0.212 and earlier Description: A Time of Check Time of Use TOCTOU issue was reported that could allow a local attacker to delete arbitrary files. This issue could potentially be exploited by a...

CVE-2022-3701: Time-of-check Time-of-use (TOCTOU) Race Condition

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges...

CVE-2022-3700: Time-of-check Time-of-use (TOCTOU) Race Condition

A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...

CVE-2022-3702: Time-of-check Time-of-use (TOCTOU) Race Condition

A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local attacker to delete contents of an arbitrary directory under certain conditions...

VMware Fusion 13.0.x < 13.5 Multiple Vulnerabilities (VMSA-2023-0022)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 13.0.x prior to 13.5. It is, therefore, affected by multiple vulnerabilities. - VMware Fusion13.x prior to 13.5 contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth...

CVE-2023-38041

A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use TOCTOU race condition. When a particular process flow is initiated, an attacker can exploit this condition to gain unauthorized elevated privileges on the affected system...

Race condition

A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use TOCTOU race condition. When a particular process flow is initiated, an attacker can exploit this condition to gain unauthorized elevated privileges on the affected system...

CVE-2023-38041

A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use TOCTOU race condition. When a particular process flow is initiated, an attacker can exploit this condition to gain unauthorized elevated privileges on the affected system...

CVE-2023-38041

CVE-2023-38041 affects Ivanti Secure Access Client prior to 22.6R1. A local unprivileged user can elevate privileges via a TOCTOU race in a specific process flow, enabling unauthorized elevated access on the system. The Ivanti forum entry provides a remediation: upgrade to version 22.6R1. The CVS...

CVE-2023-38041: Time-of-check Time-of-use (TOCTOU) Race Condition

A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use TOCTOU race condition. When a particular process flow is initiated, an attacker can exploit this condition to gain unauthorized elevated privileges on the affected system...

PT-2023-9079

Name of the Vulnerable Software and Affected Versions Ivanti Secure Access Client ISAC versions affected versions not specified Description A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use TOCTOU race condition. When a particular process flow is initiated, an...

CVE-2023-34046

VMware Fusion13.x prior to 13.5 contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during installation for the first time the user needs to drag or copy the application to a folder from the '.dmg' volume or when installing an upgrade. A malicious actor with local...

Code injection

VMware Fusion13.x prior to 13.5 contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during installation for the first time the user needs to drag or copy the application to a folder from the '.dmg' volume or when installing an upgrade. A malicious actor with local...

CVE-2023-34046

VMware Fusion TOCTOU local privilege escalation (CVE-2023-34046) affects Fusion 13.x prior to 13.5 during initial installation or upgrade. A local non-administrative user can escalate privileges to root on the host. VMware’s VMSA-2023-0022 and accompanying resources specify a fixed version of 13....

CVE-2023-34046 VMware Fusion TOCTOU local privilege escalation vulnerability

VMware Fusion13.x prior to 13.5 contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during installation for the first time the user needs to drag or copy the application to a folder from the '.dmg' volume or when installing an upgrade. A malicious actor with local...

CVE-2023-34046: Time-of-check Time-of-use (TOCTOU) Race Condition

VMware Fusion13.x prior to 13.5 contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during installation for the first time the user needs to drag or copy the application to a folder from the '.dmg' volume or when installing an upgrade. A malicious actor with local...

PT-2023-6346

Name of the Vulnerable Software and Affected Versions VMware Fusion versions 13.x prior to 13.5 Description The issue is related to a Time-of-check Time-of-use TOCTOU vulnerability in VMware Fusion. This vulnerability can be exploited by a malicious actor with local non-administrative user...