CVE-2009-3281

CVE-2009-3281 describes a privilege escalation vulnerability in the vmx86 kernel extension of VMware Fusion, affecting versions prior to 2.0.6 build 196839 on macOS. This flaw, due to incorrect file permissions, allows a local host OS user to gain elevated privileges on the host system. With a CVSS score of 7.2, it represents a high severity risk, enabling complete compromise of confidentiality, integrity, and availability if successfully exploited. While not listed on CISA's KEV catalog, public exploit code exists (EDB-10076), though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.