CVE-2013-3519

CVE-2013-3519 describes a privilege escalation vulnerability in the lgtosync.sys driver affecting various VMware products, including Workstation, Player, Fusion, ESXi, and ESX, specifically when hosting 32-bit Windows guest operating systems. An attacker with guest OS user privileges could exploit this by running a specially crafted application to gain elevated privileges within the guest OS. This vulnerability has a high CVSS score of 7.9, indicating a significant risk due to its network-adjacent attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the security community.