VMware
lastmod 2024-05-20created 2024-05-166 edits
VMware, Inc. is a company that sells cloud computing and virtualization software, headquartered in California, United States. Its R&D offices are in Palo Alto, California; San Francisco, California; Cambridge, Massachusetts; and Bengaluru, India.
Chaining N-days to Compromise All
- Hackers who hacked VMware: are virtual machines safe? || One-day chains and Pwn2Own - YouTube
- Chaining N-days to Compromise All: Part 1 — Chrome Renderer RCE | by Theori Vulnerability Research | Mar, 2024 | Theori BLOG
- Chaining N-days to Compromise All: Part 2 — Windows Kernel LPE (a.k.a Chrome Sandbox Escape) | by Theori Vulnerability Research | Apr, 2024 | Theori BLOG
- Chaining N-days to Compromise All: Part 3 — Windows Driver LPE: Medium to System | by Theori Vulnerability Research | Apr, 2024 | Theori BLOG
- Chaining N-days to Compromise All: Part 4 — VMware Workstation Information leakage | by Theori Vulnerability Research | Apr, 2024 | Theori BLOG
- Chaining N-days to Compromise All: Part 5 — VMware Workstation Guest-to-Host Escape | by Theori Vulnerability Research | May, 2024 | Theori BLOG
The sequence in summary:
- Chrome Renderer RCE (uses a Chrome renderer vulnerability as the entry point)
- Chrome Sandbox Escape (escape from the Chrome Browser)
- LPE in guest OS (gain highest privileges on the Guest OS)
- VMware Info Leak (means for escaping VMware)
- VMware Sandbox Escape (escape from VMware)
- LPE in host OS (gain highest privileges on the Host OS)