CVE-2023-20872: VMware Fusion

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation.

Affected products

• VMware Fusion: version 13.0.0 only
• VMware Workstation: version 17.0.0 only

Published 2023-04-25. Last modified 2026-06-17.