CVE-2021-22038

CVE-2021-22038 is a privilege escalation vulnerability affecting VMware InstallBuilder on Windows. It arises because the uninstaller copies itself to a predictable, non-restricted temporary location before execution. An attacker with local access could replace this copied binary with malicious code, leading to arbitrary code execution with Administrator privileges if the original uninstaller was run as such. The CVSS score of 8.8 (High) reflects its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage.