CVE-2023-20879: VMware Cloud Foundation

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

VMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor with administrative privileges in the Aria Operations application can gain root access to the underlying operating system.

Affected products

• VMware Cloud Foundation: from 4.0, up to and including 4.5
• VMware vRealize Operations: version 8.6.0 only; version 8.10.0 only

Published 2023-05-12. Last modified 2026-06-17.