CVE-2009-2267

CVE-2009-2267 describes a privilege escalation vulnerability affecting multiple VMware products, including Workstation, Player, ACE, Server, Fusion, ESXi, and ESX. The flaw, occurring when Virtual-8086 mode is used, allows a guest OS user to gain privileges on the guest operating system by manipulating the cs register during a page fault exception. Rated with a CVSS score of 6.9 (Medium), this vulnerability has a local attack vector and medium attack complexity, leading to potential complete compromise of confidentiality, integrity, and availability within the guest OS. While not on CISA's KEV catalog, an ExploitDB entry (EDB-10207) exists for a Linux local ring0 exploit, indicating public exploit code availability, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.